CVE-2026-100235

A flaw was found in Apache ZooKeeper. A time-of-check to time-of-use TOCTOU race condition during Access Control List ACL updates allows operations to be evaluated against outdated permissions. An attacker can exploit the timing window between an ACL update submission and its final commit to...