CVE-2021-28099

CVE-2021-28099 is a medium-severity vulnerability affecting Netflix OSS Hollow. It stems from a race condition where an attacker can pre-create directories with weak permissions and an insecure random number generator allowing predictable file names. This local attack requires low privileges and user interaction, potentially leading to limited confidentiality and integrity impacts. There is currently no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.