CWE-421: Race Condition During Access to Alternate Channel
The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.
Overview
This creates a race condition that allows an attacker to access the channel before the authorized user does.
Real-world CVEs
8 recorded CVEs are caused by CWE-421 (Race Condition During Access to Alternate Channel). The highest-severity and most recent are shown first. 0 new CWE-421 CVEs have been recorded so far in 2026 (2 in 2025).