CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- nagios host, teamviewer full client +1 moreLocal Privilege Escalation via Improper Link Resolution in Cloud Session Recording7.0 High
- No product listedmark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper...5.9 Medium
- lxcLXC: lxc-copy host-context hostname update follows symlink6.8 Medium
- kevva decompress@xhmikosr/decompress: Path traversal via symlink chain9.1 Critical
- canonical lxdLXD client recursive file pull allows directory escape via malicious VM agent5.8 Medium
- canonical lxdArbitrary file write on LXD host via symlink in migration stream9.9 Critical
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFlatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following2.5 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFlatpak: flatpak: extension metadata path traversal file existence oracle3.1 Low
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFlatpak: flatpak: path traversal issue in oci archive extraction via hardlinks6.5 Medium
- froxlorFroxlor before 2.3.12 Privilege Escalation via Symlink9.4 Critical
- froxlorFroxlor before 2.3.12 Arbitrary File Deletion via Symlink8.5 High
- gitoxidelabs gitoxidegitoxide gix-fs before 0.23.0 Worktree Escape via Symlink7.3 High
- kitty project kittyImproper link resolution in the kitty drag and drop protocol allows a client to create files outside the staging directory4.6 Medium
- 9001 copypartycopyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers2.3 Low
- apache software foundation buildstreamApache BuildStream: tar source extraction escape9.8 Critical
- watchdog anti-virusArbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration5.2 Medium
- grafana enterprise, oss +1 moreCVE-2026-15815 CVE Record8.8 High
- midnightbsd mportmport package installation has symlink TOCTOU in chown and chmod handling5.8 Medium
- midnightbsd mportmport directory asset installation is vulnerable to symlink and path traversal races5.8 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: File Manager save_file writes through a symbolic link planted after the containment check6.0 Medium
- oras-project oras-gooras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)8.8 High
- dell update package frameworkDell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution...3.0 Low
- dell update package frameworkDell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution...3.0 Low
- webpros solusvmAn insufficient check allowed for the overwrite of arbitrary files via a symlink.9.4 Critical
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +6 more +8 morePodman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory4.4 Medium
- docker sandboxesDocker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback9.4 Critical
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden...8.4 High
- mikrotik routerosMikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction6.9 Medium
- nanocoai nanoclawnanocoai NanoClaw Attachment agent-route.ts forwardAttachedFiles link following5.3 Medium
- filebrowserFile Browser through 2.63.23 Path Traversal via Symlink Alias7.6 High
- python software foundation cpythontarfile hardlink fallback ignores custom extraction filter rejection via None5.7 Medium
- gohugoio hugoHugo before v0.165.0 Symlink Confinement Bypass via resources.Get9.3 Critical
- rclonerclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination7.1 High
- gohugo hugoHugo before v0.166.0 Path Traversal via Symlinked Mount Roots8.7 High
- gohugo hugoHugo v0.161.0 to v0.165.0 Arbitrary File Read via Symlinks8.7 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreCrun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown5.6 Medium
- containers crun, red hat enterprise linux 10, enterprise linux 8 +4 more +6 moreCrun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs5.6 Medium
- python software foundation cpythontarfile extraction filters allow file modification and content disclosure via hard link to symlink8.4 High
- okta verify for windowsImproper Link Resolution in Okta Verify for Windows Uninstaller Data Removal6.0 Medium
- microsoft windows, windows 11 version 23h2, windows 11 version 24h2 +8 more +10 moreWindows Update Stack Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +5 more +7 moreWindows NTFS Tampering Vulnerability4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Setup Files Cleanup Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +5 more +7 moreWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Shell Spoofing Vulnerability8.1 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +5 more +7 moreWindows Container Manager Service Security Feature Bypass Vulnerability4.7 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +7 more +9 moreWindows NTFS Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability5.5 Medium
- microsoft sql server 2017 (cu 31), sql server 2017 (gdr), sql server 2019 (cu 32) +9 more +11 moreMicrosoft SQL Server Elevation of Privilege Vulnerability8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreGlib2: toctou symlink race in `g_file_create_replace_destination` fallback path5.3 Medium
- imagemagickImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race2.0 Low
- Show moreLoading…