CVE-2026-21046

None

CVSS

—

EPSS

—

Published

Jul 10, 2026

CISA due date

—

The record

Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to SMR Jul-2026 Release 1 allows local privileged attackers to execute arbitrary code.

Affected packages

Ecosystem	Package	Introduced	Fixed