CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- rsyncproject rsyncrsync < 3.5.0 Symlink Race Condition via ACL/xattr Application7.2 High
- rsyncproject rsyncrsync < 3.5.0 Symlink Race Condition Information Disclosure5.7 Medium
- rsyncproject rsyncrsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling5.8 Medium
- rsyncproject rsyncrsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest7.2 High
- rsyncproject rsyncrsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode9.1 Critical
- rsyncproject rsyncrsync < 3.5.0 Path Traversal Write Escape via --relative Mode6.9 Medium
- rsyncproject rsyncrsync < 3.5.0 Path Traversal via Symlink Module Root8.4 High
- rsyncproject rsyncrsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync8.6 High
- rsyncproject rsyncrsync < 3.5.0 Symlink Following Arbitrary File Overwrite8.5 High
- ether etherpadEtherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite4.2 Medium
- filebrowserfilebrowser before 2.63.19 Out-of-Scope File Deletion via Symlink7.2 High
- palo alto networks prisma access agentPrisma Access Agent: Authenticated Limited File Deletion on Linux1.1 Low
- chofstede ansible jailexecAnsible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)8.2 High
- canonical lxdArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root9.9 Critical
- canonical lxdRoot RCE via image backup.yaml symlink9.9 Critical
- microsoft onedrive, onedrive for macos +1 moreMicrosoft OneDrive for MacOS Elevation of Privilege Vulnerability6.7 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +12 more +14 moreWindows User Profile Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreWindows Management Services Denial of Service Vulnerability5.5 Medium
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 moreWindows DHCP Server Elevation of Privilege Vulnerability7.8 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreMrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation7.1 High
- tp-link systems inc. eb810v(eu1) v1.0, ex220(br) v1.0/1.20/1.28/1.29/1.8, ex220(br) v2.0 +30 more +32 moreArbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices5.1 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreLibvirt: swtpm privilege escalation via symlink following7.8 High
- cyberpanelCyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Upload7.1 High
- alexcrichton tar-rstar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()7.1 High
- systemd systemd-oomdsystemd-oomd: unprivileged users can terminate arbitrary processes5.5 Medium
- rrwo file::rotate::simpleFile::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files2.5 Low
- go-gitgo-git: Worktree operations may follow symlinks7.1 High
- nrwl nxNx: Zip-Slip in the self-hosted remote cache8.7 High
- mf-yang openclaw-cnmf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following5.3 Medium
- jenkinsJenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with...4.3 Medium
- cisco catalyst sd-wan controller, catalyst sd-wan manager +1 moreCisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access9.1 Critical
- gen digital ccleanerCCleaner local privilege escalation via link following on uninstall7.8 High
- dell monitor driverDell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access (...6.6 Medium
- gnu tar, red hat discovery 2, enterprise linux 10 +10 more +12 moreTar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite4.4 Medium
- borgbackup borgborg extract might modify out-of-tree files when extracting maliciously crafted archives5.3 Medium
- linuxfabrik monitoring-pluginsLinuxfabrik monitoring-plugins: Symlink following in logfile legacy database migration5.8 Medium
- bitdefender total securityG DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability7.8 High
- develar app-builderDevelar's electron-builder allows arbitrary file overwrite6.5 Medium
skilocrates.ioskilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source6.5 Medium- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...5.5 Medium
- dji sparkperwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink5.3 Medium
Magick.NET-Q16-AnyCPUNuGet,Magick.NET-Q16-arm64NuGet,Magick.NET-Q16-HDRI-AnyCPUNuGet +14 more +16 moreImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-492194.7 Medium- loytec l-dali, l-gate, l-inx +5 more +7 moreLoytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starter9.2 Critical
- egor data::disjointset::sharedData::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW4.0 Medium
- Show moreLoading…