RAce conditions on symbolic links handling, access to partially matched directories, privilege escalation because of absent GID/UID check.
vulners.com/securityvulns/securityvulns:doc:16680