CVE-2026-77059

boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...

CVE-2026-77059 TOCTOU Race Condition in boneIO

boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...

EUVD-2026-109954

boneIO Black contains a TOCTOU race condition in the createtimedatectlsudoersfile function in boneio/webui/routes/timezonesudoers.py. The function writes sudoers rules to a predictable temporary file, validates them, then installs them with root privileges. A local attacker can exploit the race...

CVE-2026-77059

The boneIO Black software contains a TOCTOU (Time-of-Check Time-of-Use) race condition within the create_timedatectl_sudoers_file() function of the boneio/webui/routes/timezone_sudoers.py file. The vulnerability arises because the function writes sudoers rules to a predictable temporary file , pe...