4 matches found
EUVD-2026-95420
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...
CVE-2026-56857
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...
CVE-2026-56857
On Windows , the os package functions Root.Mkdir and Root.MkdirAll are vulnerable to a directory traversal-like behavior. When the target path ends in a junction pointing to an empty location (e.g., path/to/junction), the operation can create a directory at the junction target even if it resides ...
CVE-2026-56857 Root.Mkdir(All) can follow junctions out of the root on Windows in os
On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction...