CWE-59: insecure temporary file
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Also known as Improper Link Resolution Before File Access, Zip Slip, Link Following.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
strands-agentsPyPIStrands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage7.1 High- kubernetesSubpath symlinking on Windows nodes permits NTLM coercion5.8 Medium
- apple macosThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...7.5 High
- apple macosA path handling issue was addressed with improved logic. This issue is fixed in macOS Golden Gate...6.5 Medium
- apple ipados, macos, visionos +2 more +4 moreThis issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.7.2...5.5 Medium
- zip-rs zip2zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)7.4 High
- syncplify, inc. syncplify server!Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape7.6 High
- webasyst frameworkWebasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks6.9 Medium
- fallow-rs fallow, @fallow-cli fallow-node, fallow-rs fallow-cli +1 more +3 moreFallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root3.3 Low
- microsoft vm inspector for azure virtual machinesVM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability10.0 Critical
- lxc incusIncus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Recursive File Pull6.9 Medium
- lxc incusIncus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 Arbitrary File Write via Symlink in Migration Stream9.4 Critical
- jetbackupJetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore8.6 High
- cisco telepresence video communication server (vcs) expresswayCisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution Vulnerabilities7.0 High
- velneo vserverArbitrary File Read via Symlink in Velneo vServer HTTP Server6.0 Medium
- pypa virtualenvvirtualenv: Deletion recovery can change a symlink target's mode4.5 Medium
- pypa virtualenvvirtualenv: Generated files can follow existing destination links4.5 Medium
- pypa virtualenvvirtualenv: Builtin creation follows linked environment directories4.5 Medium
- froxlorFroxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron9.4 Critical
- tox-dev filelockfilelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files7.1 High
- tox-dev filelockfilelock: ReadWriteLock follows a symlink at the lock path into SQLite6.1 Medium
- tox-dev filelockfilelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory5.3 Medium
- tox-dev filelockfilelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker2.5 Low
- anshupriyan cli-bridgeCLI Bridge: High-severity sandbox escape via dangling symlink7.5 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreRhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service6.0 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreNautilus: nautilus: arbitrary file deletion via trash symlink6.6 Medium
- gruntwork-io terragruntTerragrunt catalog predictable temp symlink clobber4.4 Medium
- qnap systems inc. virtualization stationPath Traversal in Virtualization Station VM Import8.7 High
- gitpython-developers gitpythonGitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()6.9 Medium
- error311 fileriseFileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root6.8 Medium
- error311 fileriseFileRise Shared Folder Symlink Escape4.8 Medium
- coderamp-labs gitingestGitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion8.7 High
- appiumAppium: Symlink based Zip Slip in @appium/support ZIP extraction6.5 Medium
- ludwig-ai ludwigLudwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink members8.1 High
- red hat enterprise linux 6, hardened images +1 moreBusybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory6.3 Medium
- red hat hardened imagesBusybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +11 more +13 moreWindows Backup Engine Elevation of Privilege Vulnerability7.0 High
- microsoft windows subsystem for linux (wsl2)Windows Subsystem for Linux Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreWindows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +8 more +10 moreWindows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreMicrosoft Windows Search Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows WalletService Elevation of Privilege Vulnerability7.8 High
- microsoft windows defenderMicrosoft Defender Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreMicrosoft Windows Search Component Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Portable Device Enumerator Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Host Guardian Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Update Orchestrator Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows User Profile Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Update Orchestrator Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +11 more +13 moreWindows Backup Engine Information Disclosure Vulnerability5.5 Medium
- Show moreLoading…