CVE-2026-126410

The wasmtime-wasi crate in Wasmtime versions 48.0.0 before 48.0.8 , 49.0.0 before 49.0.5 , and 50.0.0 before 50.0.1 is vulnerable to a time-of-check/time-of-use (TOCTOU) race condition. The flaw exists in the wasip3 wasi:sockets udp-socket host implementation, allowing a malicious guest to bypass...