CVE-2026-16211

Name of the Vulnerable Software and Affected Versions allegro versions prior to bcf65b994ef29fb3fc2e10b660e6288723d5209e

Description A race condition exists in the Hostname Allocation Handler component within the AssetLastHostname.increment hostname() function located in the src/ralph/assets/models/assets.py file. This issue occurs when the counter argument is manipulated, potentially allowing an attacker to exploit the timing of concurrent operations. A race condition is a situation where the behavior of software depends on the relative timing of events, such as the order in which threads are scheduled.

Recommendations Update allegro to version bcf65b994ef29fb3fc2e10b660e6288723d5209e or later. As a temporary mitigation, restrict access to the AssetLastHostname.increment hostname() function to minimize the risk of exploitation.