CVE-2026-39822

On Unix systems, the golang os.Root component contains a flaw where it improperly follows symbolic links to locations outside of the Root directory. This occurs when the final path component is a symbolic link and the path ends in / ; for instance, root.Open("symlink/") may access content outside...