EUVD-2026-65492

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A path traversal flaw in the sos clean utility (part of the sos package) allows a local attacker to perform arbitrary file creation or overwrite . The root cause is improper validation of symlink and hardlink targets during tar archive extraction. A specially crafted tar archive can cause files t...

CVE-2026-79655 Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

CVE-2026-79655

A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By crafting a malicious tar archive, an attacker can exploit a path traversal issue during tar extraction, where symlink and hardlink target...

attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

A flaw was found in the attr package. This vulnerability allows a local attacker to perform a symlink traversal attack by replacing a pathname component with a symbolic link - either during directory hierarchy traversal by getfattr or during backup restoration by setfattr, which reads and resolve...

Moderate: Red Hat Security Advisory: attr security update

An update for attr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Security update for git-lfs

This update for git-lfs fixes the following issue: CVE-2025-26625: certain commands may write to files visible outside the current Git working tree if links which collide with the paths of files tracked by Git LFS exist bsc1252259. Changes for git-lfs: update to 3.7.1 Patch Instructions: To insta...

SUSE-SU-2026:3801-1 Security update for git-lfs

This update for git-lfs fixes the following issue: - CVE-2025-26625: certain commands may write to files visible outside the current Git working tree if links which collide with the paths of files tracked by Git LFS exist bsc1252259. Changes for git-lfs: - update to 3.7.1...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

CVE-2026-75038

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

CVE-2026-75038

CVE-2026-75038 is a local denial-of-service vulnerability in LACT (ilya-zlobintsev/LACT), affecting versions through 0.10.0 . The root cause is a predictable temporary file created in /tmp , which an attacker can exploit via a UNIX symbolic link (symlink) following attack. The CVSS 3.1 score is 6...

CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

EUVD-2026-65393

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

Symlink Attack

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Symlink Attack via the createLockFile function. An attacker can overwrite arbitrary files by pre-creating symbolic links at predictable lock...

CVE-2026-72696

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

CVE-2026-72696

Grav CMS versions before 2.0.16 are affected by a symlink following vulnerability in the Scheduler Job::createLockFile() method. The root cause is that lock file paths are predictable and reside in a world-writable temp directory , allowing a local attacker to pre-create a symlink at the expected...