CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 8 +7 more +9 moreAnsible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown7.3 High
- dell dell/alienware purchased appsDell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution...6.3 Medium
- microsoft pc managerMicrosoft PC Manager Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWinlogon Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability7.8 High
- dell idrac toolsDell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File...6.0 Medium
- nesquena hermes webuiHermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypass7.1 High
- libfuse sshfsSSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write9.3 Critical
- gleamSymlink Following in Hex Package Export Allows Embedding Files Outside Project Root5.1 Medium
- steipete codexbarCodexBar < 0.32.0 Insecure Temporary File Handling in Notarization Workflow7.2 High
- apache airflowApache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandler6.5 Medium
- sparkle project sparkleSparkle: Binary delta apply intermediate-symlink traversal in malicious .delta6.1 Medium
- froxlorFroxlor has privilege escalation in SSH key synchronization via symlinked `authorized_keys` path8.8 High
- canon inc. pixus ix6800 series cups printer driver for macos, pixma ix6800 series cups printer driver for macos, pixma mg2500 series cups printer driver for macos +2 moreImproper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may...5.1 Medium
- canon inc. my image garden for macosImproper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8...5.1 Medium
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory2.0 Low
- microsoft .net, .net 10.0 runtime, .net 8.0 +2 more +4 more.NET Tampering Vulnerability6.2 Medium
- red hat container native virtualization 4.17, container native virtualization 4.18, container native virtualization 4.19 +3 more +5 moreKubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read7.7 High
- mcdope pam usbpam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption7.9 High
- jenkins project pipeline: groovy libraries plugin, jenkins pipeline\ +1 moreJenkins Pipeline: Groovy Libraries Plugin does not prohibit symbolic links in shared libraries7.5 High
- red hat container native virtualization 4.12, container native virtualization 4.13, container native virtualization 4.14 +7 more +9 moreKubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability9.9 Critical
- bingos archive::tar, archive\ \, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moreArchive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory7.5 High
- bingos archive::tar, archive\ \, red hat enterprise linux 10 +8 more +10 moreArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory9.1 Critical
- pavel-odintsov fastnetmonFastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via...5.5 Medium
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA link following vulnerability in the Trend Micro Apex One scan engine could allow a local...7.8 High
- netatalkArbitrary file read via attacker-controlled symlink creation8.1 High
- microsoft windows admin center in azure portal, windows admin center +1 moreWindows Admin Center in Azure Portal Elevation of Privilege Vulnerability7.8 High
- microsoft defender, malware protection engine +1 moreMicrosoft Defender Elevation of Privilege Vulnerability7.8 High
- rsyncproject rsyncRsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls7.2 High
- No product listedAn issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell...5.3 Medium
- npitre cramfs-toolsnpitre cramfs-tools cramfsck.c change_file_status symlink4.6 Medium
- microsoft apmMicrosoft APM: Symlinks under `.apm/prompts/` and `.apm/agents/` are dereferenced during `apm install`, copying host-local file contents into the project tree7.4 High
- portainerPortainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update8.5 High
- anthropic claude desktop, anthropics claude-code +1 moreClaude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService8.5 High
- garmin empirbus wireless display unit firmwareThe locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack. If a...7.5 High
- hashicorp shared libraryNomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack6.0 Medium
- hashicorp nomad, nomad enterprise +1 moreNomad vulnerable to arbitrary file read/write on client host through symlink attack6.0 Medium
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability6.3 Medium
- dragonmonk111 junoclawJunoClaw: upload_wasm accepted arbitrary filesystem paths without validation8.5 High
- hashicorp toolingConsul-template vulnerable to sandbox path bypass in file helper via a symlink attack4.7 Medium
- cyberpanelCyberPanel 2.1 Authenticated Remote Code Execution via Symlink Attack8.7 High
- mervinpraison praisonaiPraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`8.7 High
- go toolchain cmd/go, golang go +1 moreInvoking "go bug" follows symlinks in predictable temporary filenames in cmd/go5.3 Medium
- bentomlBentoML has Information Disclosure in `bentoml build` via symlink traversal in the build context5.5 Medium
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: NodeVM require.root bypass via symlink traversal allows sandbox escape8.5 High
- gitoxidelabs gitoxide, gix-fs +1 moregitoxide: Symlink prefix-reuse allows worktree escape during checkout7.8 High
- jo-jo98 ciguardciguard: discover_pipeline_files follows symlinks out of scan root3.2 Low
- gitoxidelabs gitoxidegitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules8.7 High
- iobit advanced systemcareIObit Advanced SystemCare Service ASC.exe symlink7.3 High
- chainguard-dev apkoapko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root7.5 High
- Show moreLoading…