Base weakness
Draft
CWE-421: Race Condition During Access to Alternate Channel
The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
Last updated
8
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
This creates a race condition that allows an attacker to access the channel before the authorized user does.
Real-world CVEs
8 recorded CVEs are caused by CWE-421 (Race Condition During Access to Alternate Channel). The highest-severity and most recent are shown first. 0 new CWE-421 CVEs have been recorded so far in 2026 (2 in 2025).