CVE-2026-34452: Path Validation Toctou Returns Unresolvedcve-2026-34452-path-validation-toctou-returns-unresolved
A path is resolved to perform directory sandbox validation, but the function subsequently returns the original, unresolved path. This produces a Time-of-Check to Time-of-Use (TOCTOU) race condition. A local attacker can tamper with path symlinks after the path has been validated but before it is used, escaping the restricted directory. Return the safely reso
