CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- edgelesssys contrastContrast before 1.19.1 CopyFile Policy Symlink Subversion8.6 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1...7.4 High
- dell dell/alienware purchased apps, dell\/alienware purchased apps +1 moreDell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution...6.3 Medium
- nousresearch hermes-agentNousResearch hermes-agent file_tools.py _check_sensitive_path symlink4.8 Medium
- tubitak bilgem software technologies research institute pardus aboutImproper Authentication in TUBITAK BILGEM's Pardus About8.8 High
- spring boot, vmware spring boot +1 moreSpring Boot's PID file write follows symlinks at predictable default path4.7 Medium
- radare radare2radare2 < 6.1.4 Project Notes Path Traversal via Symlink6.9 Medium
- tenable nessus, nessus agent, tenable, inc. tenable nessus, tenable nessus agent +2 moreJunction File Manipulation7.4 High
- uutils coreutilsuutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion6.6 Medium
- uutils coreutilsuutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap4.7 Medium
- uutils coreutilsuutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race6.3 Medium
- uutils coreutilsuutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race6.3 Medium
- uutils coreutilsuutils coreutils Path-Based Safety Bypass with --preserve-root6.7 Medium
- uutils coreutilsuutils coreutils tail Privileged Information Disclosure via Symlink Replacement Race5.3 Medium
- uutils coreutilsuutils coreutils chmod Path Traversal Bypass of --preserve-root7.3 High
- saurabh-kumar python-dotenvpython-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback6.6 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR8.4 High
- node-modules compressingComplete Bypass of CVE-2026-24884 Patch via Git-Delivered Symlink Poisoning in compressing8.4 High
- froxlorFroxlor has Incomplete Symlink Validation in DataDump.add() that Allows Arbitrary Directory Ownership Takeover via Cron7.5 High
- weblateWeblate: Arbitrary File Read via Symlink7.7 High
- cisco thousandeyes enterprise agentCisco ThousandEyes Enterprise Agent Arbitrary File Overwrite Vulnerability5.5 Medium
- lenovo software fixDuring an internal security assessment, a potential vulnerability was discovered in Lenovo...5.2 Medium
- lenovo diagnostics, hardware scan, vantage +2 moreDuring an internal security assessment, a potential vulnerability was discovered in Lenovo...6.9 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreUniversal Plug and Play (upnp.dll) Information Disclosure Vulnerability5.5 Medium
- aces lorisLORIS incorrectly trusts user input in publication module3.5 Low
- go standard library internal/syscall/unix, golang go +1 moreTOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix6.4 Medium
- flatpak, red hat enterprise linux 10, enterprise linux 10.0 extended update support +12 more +14 moreFlatpak has a complete sandbox escape leading to host file access and code execution in the host context9.3 Critical
- kernel util-linuxutil-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device Setup4.7 Medium
- openclawOpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal7.6 High
- openclawOpenClaw < 2026.3.31 - Arbitrary File Write via Symlink Following in SSH Sandbox Tar Upload7.2 High
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...8.7 High
- linuxfoundation onnxONNX symlink-following and path-traversal arbitrary file write6.8 Medium
- tinacms, ssw tinacms\/graphql +1 more@tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions7.1 High
- tinacms, ssw tinacms\/cli +1 more@tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions7.1 High
- anthropic claude sdk for python, anthropics anthropic-sdk-python +1 moreClaude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape5.8 Medium
- moby buildkitBuildKit Git URL subdir component can cause access to restricted files8.2 High
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7...6.2 Medium
- capgo cliCapgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operations6.8 Medium
- jenkins, red hat openshift developer tools and services 4.12, openshift developer tools and services 4.13 +9 more +11 moreJenkins has a link following vulnerability allows arbitrary file creation8.8 High
- openclawOpenClaw < 2026.3.11 - Sandbox Boundary Bypass via Unvalidated Temporary File Creation5.8 Medium
openclawnpmOpenClaw: Sandbox dangling-symlink alias handling could bypass workspace-only write boundary7.0 High- openclawOpenClaw < 2026.2.26 - Workspace Path Boundary Bypass via Non-existent Symlink7.2 High
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to arbitrary file reads through the vault kubernetes authentication provider6.8 Medium
- himmelblau-idm himmelblauhimmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache8.8 High
- labredescefetrj wegiaWeGIA affected by arbitrary file read via symlink in backup restore6.9 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 moreWinlogon Elevation of Privilege Vulnerability7.8 High
- imagemagickImageMagick has a Path Policy TOCTOU symlink race bypass6.3 Medium
- avira internet security, gen digital inc. avira internet security +1 moreAvira Internet Security Arbitrary File Deletion via Improper Link Resolution7.8 High
- Show moreLoading…