CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- gitoxidelabs gitoxide gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe 7.1 High
- go-vikunja vikunja Vikunja veans before 2.7.1 Symlink Following in veans init 4.8 Medium
- ddev DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885 6.5 Medium
- jetbrains intellij idea In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when... 7.1 High
- jetbrains intellij idea In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported... 7.8 High
- jetbrains datalore In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private... 8.8 High
- red hat migration toolkit for applications 8, migration toolkit for virtualization, openshift service mesh 3 +12 more +14 more Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902) 6.7 Medium
- vitali87 code-graph-rag Code Graph RAG structural tools follow out-of-root symlinks 7.1 High
- thalesgroup safenet authentication client service Privileged file deletion in SafeNet Authentication Client SACSrv 5.8 Medium
- nvm-sh nvm nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can write 6.7 Medium
- nvm-sh nvm nvm prints the contents of any readable file through a symlinked .nvmrc 6.7 Medium
- janhq jan Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlink 5.7 Medium
- romkatv powerlevel10k Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary File 4.1 Medium
- google chrome Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote... 8.1 High
- anthropics claude-code Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace 7.7 High
- isomorphic-git isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE) 8.8 High
- docker sandboxes Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory 8.4 High
- mongodb database tools mongofiles may write outside the working directory through a symlink 1.0 Low
- jarun nnn nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling 1.0 Low
- novik rutorrent ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following 6.0 Medium
- webpros cpanel Improper link resolution before file access in cPanel allows remote authenticated users to write... 8.8 High
- postgresql psqlodbc psqlODBC log files are created with default permissions at a predictable path and follow symbolic links 5.3 Medium
- beam-cloud beta9 worker Beta9 container escape via unvalidated sandbox file paths 9.9 Critical
- gnome epiphany epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install 5.5 Medium
- pi-hole Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink 7.8 High
- pi-hole Pi-hole: file:// adlist read check and curl can resolve different files 2.2 Low
- pgadmin.org pgadmin 4 pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check 7.3 High
- zuke-build zuke zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory 5.5 Medium
- bastillebsd bastille Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp 5.3 Medium
- No product listed CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup 5.5 Medium
- proftpd ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass 6.0 Medium
- apple xcode This issue was addressed with improved handling of symlinks. This issue is fixed in Xcode 27.2.... 3.3 Low
- hashicorp nomad, nomad enterprise +1 more Nomad allocation data migration may allow host directory permission modification via symlink following 8.8 High
- hashicorp nomad, nomad enterprise +1 more Nomad dispatch payload writes can escape the allocation directory through symlinks 8.4 High
- elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification 7.5 High
- elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss 8.2 High
- elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass 7.2 High
-
libmime-tools-perlDebian,perl-MIME-toolsopenSUSE +1 more MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes 7.0 High - jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an... 8.1 High
- jenkins Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the... 6.5 Medium
- juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root 8.8 High
- avast antivirus, gen digital avast antivirus, avg internet security +1 more +3 more Norton, Avast, and AVG local privilege escalation via link following in Data Shredder 7.3 High
- gtsteffaniak filebrowser FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory 8.6 High
- tanium end-user-cx, endpoint configuration toolset solution +1 more Tanium addressed a local privilege escalation vulnerability in End-User Notifications. 7.8 High
- tanium endpoint configuration toolset solution, threat-response-cx +1 more Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. 6.3 Medium
- tanium end-user-cx, endpoint configuration toolset solution +1 more Tanium addressed a local privilege escalation vulnerability in End-User Notifications. 7.8 High
- tanium end-user-cx, endpoint configuration toolset solution +1 more Tanium addressed a local privilege escalation vulnerability in End-User Notifications. 7.8 High
- sebhildebrandt systeminformation systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net 3.3 Low
- watchguard fireware os Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root 7.2 High
- watchguard fireware os Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root 7.1 High
- Show olderLoading…