CVE-2026-81690

openssl-encrypt pip package before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob, which in CPython does not descend into symlinked directories and treats the symlink as an ordinary directory, while ONOFOLLOW on the...

CVE-2026-56651

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

CVE-2026-76845

A flaw was found in adm-zip, a Node.js library used for handling zip archives. This vulnerability allows a local attacker to overwrite arbitrary files on the system. When extracting an archive, adm-zip follows symbolic links, which are special files that point to other files or directories. An...

CVE-2026-49114

A flaw was found in ONNX. The saveexternaldata function is vulnerable to symlink following and path traversal. A local attacker with write access to a directory where a victim serializes external data can exploit this by pre-planting a symlink. This allows the attacker to cause the victim's write...

Fortinet_FortiClient_Exploit_CVE-2026-24018

Exploit de Fortinet FortiClient CVE-2026-24018 Exploit totalmente funcional para CVE-2026-24018: una vulnerabilidad de seguimiento de enlaces simbólicos Symlink de UNIX en Fortinet FortiClientLinux 7.4.0 hasta 7.4.4, FortiClientLinux 7.2.2 hasta 7.2.12 permite a un usuario local y sin privilegios...

CVE-2026-D0cker

CVE-2026-Pending: Container-Escape über die runC-maskPaths-Sicherheitslücke Schweregrad: Kritisch CVSS 9.8 Komponente: opencontainers/runc libcontainer Sicherheitslückentyp: CWE-59: Unzulässige Linkauflösung vor Dateizugriff 'Link Following' 🚨 Zusammenfassung Eine kritische Sicherheitslücke beste...

subpath-exploit

通过 CVE-2017-1002101 实现 Kubernetes 逃逸示例 描述 在了解到这个问题并参考此指南后，我想进一步探索。该仓库包含几个 Pod 部署和辅助 Shell 脚本，以最简单的方式演示了攻击机制，使 Kubernetes 管理员和运维人员能够充分理解其严重性和潜在风险。您必须是已认证用户，或者能够在创建 Pod 时控制其 spec/template，因此这种逃逸不太可能以匿名方式发生，除非与其他攻击（如这个）结合使用。 快速解释 当 Kubelet 挂载卷/密钥/配置映射等时，它会错误地跟随卷内部的符号链接，访问到本应限制范围之外的位置。由于 Kubelet 以 ro...

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...

CVE-2026-79939

Dell PowerProtect Cyber Recovery , versions prior to 20.3 , contain a UNIX Symbolic Link (Symlink) Following vulnerability. A low-privileged attacker with local access could potentially exploit this flaw, leading to Script injection . The vulnerability is rated CVSS 5.8 (MEDIUM) with a vector of ...

CVE-2026-79939

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...

EUVD-2026-66706

Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Script injection...

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "È stata segnalata una vulnerabilità di follow-up dei collegamenti che interessa Qsync Central. Se sfruttata, la...

golang: Go os.Root: Symlink following vulnerability allows directory traversal

A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...

CVE-2026-75038

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

EUVD-2026-65393

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

CVE-2026-75038 Predictable temporary file in /tmp allows symlink attack in LACT

UNIX symbolic link symlink following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0...

CVE-2026-72696

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

CVE-2026-72696

Grav CMS versions before 2.0.16 are affected by a symlink following vulnerability in the Scheduler Job::createLockFile() method. The root cause is that lock file paths are predictable and reside in a world-writable temp directory , allowing a local attacker to pre-create a symlink at the expected...

CVE-2026-72696 Grav CMS before 2.0.16 Symlink Following via createLockFile

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...

EUVD-2026-65210

Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile that allows local attackers to overwrite arbitrary files by pre-creating symlinks at predictable lock file paths in the world-writable temp directory. Attackers can place a symlink at the predictabl...