Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.