Local file disclosure via post-write permission change

A file-permission race in OpenStack Storlets before 13.0.0.0rc1 allows local users to read cached storlet or dependency content. The gateway.py bring_from_cache path writes each cache file before applying restrictive permissions, leaving its contents readable by a different local user during the write window. Exploitation requires local access and winning the short race; the demonstrated consequence is disclosure of the file being populated, not arbitrary code execution.