CWE-61: UNIX Symbolic Link (Symlink) Following
The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
Also known as Symlink following, symlink vulnerability.
A kind of CWE-59 insecure temporary file.
From the CWE List. © The MITRE Corporation.
Newest
- jenkins, red hat openshift developer tools and services 4.12, openshift developer tools and services 4.13 +9 more +11 moreJenkins has a link following vulnerability allows arbitrary file creation8.8 High
- fortinet forticlient, forticlientlinux +1 moreA UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through...7.4 High
- zedZed Extension Sandbox Escape via Tar Symlink Following8.8 High
- openclawOpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection4.6 Medium
- anthropic claude code, anthropics claude-code +1 moreClaude Code Has Permission Deny Bypass Through Symbolic Links2.3 Low
- amazon firecrackerArbitrary Host File Overwrite via Symlink in Firecracker Jailer6.0 Medium
- backstage@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass6.3 Medium
- copier-org copierCopier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true6.9 Medium
- copier-org copierCopier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false6.8 Medium
- forgejoForgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server...9.5 Critical
- nvidia resiliency extensionNVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an...8.4 High
- ugreen dh2100+Ugreen DH2100+ USB symlink7.0 High
- weaviateWeaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip7.2 High
- static-web-server static web server, static-web-server +1 moreStatic Web Server is vulnerable to symbolic link Path Traversal5.5 Medium
- pleskWebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated...7.8 High
- apptainerApptainer ineffective application of selinux and apparmor --security options4.5 Medium
- sylabs singularitySingluarity ineffectively applies of selinux / apparmor LSM process labels4.5 Medium
- osc ondemandOpen OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU)4.3 Medium
- youki-dev youkiyouki container escape and denial of service due to arbitrary write gadgets and procfs write redirects7.3 High
- youki-dev youkiyouki container escape via "masked path" abuse due to mount race conditions7.3 High
- linuxfoundation runcrunc: LSM labels can be bypassed with malicious config using dummy procfs files7.3 High
- linuxfoundation runccontainer escape due to /dev/console mount and related races8.4 High
- linuxfoundation runcrunc container escape via "masked path" abuse due to mount race conditions7.3 High
- dell supportassist for business pcs, supportassist for home pcs +1 moreSupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs versions 4...6.3 Medium
- wonderwhy-er desktopcommandermcpwonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink2.0 Low
- anthropic claude code, anthropics claude-code +1 moreClaude Code: Permission deny bypass is possible through symlink2.3 Low
- opensuse tumbleweedSUSE-specific logrotate configuration allows escalation from mail user/group to root6.9 Medium
- mafintosh tar-fstar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball8.7 High
- astral-sh tokio-tarastral-tokio-tar has a path traversal in tar extraction6.1 Medium
- No product listedSymlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices8.1 High
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +19 more +21 morePodman: podman kube play command may overwrite host files8.1 High
- opensuse tumbleweedtraefik2-2.11.29-2.1 on GA media8.5 High
- airlinklabs daemonAirlink's Daemon Symlink Vulnerability8.7 High
- n8nn8n has a symlink traversal vulnerability in "Read/Write File" node allows access to restricted files6.5 Medium
- youki-dev youkiYouki Symlink Following Vulnerability7.0 High
- No product listedUnsafe symlink following in restricted workspace-write sandbox leads to RCE8.8 High
- ivanti connect secure, neurons for secure access, policy secure +2 more +4 moreImproper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2,...5.5 Medium
- dell encryption, encryption admin utilities +1 moreDell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution...7.8 High
- bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 moreiwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature7.0 High
- google web designerRCE In Google Web Designer7.8 High
- suse opensuse tumbleweeddaily-backup.sh script in cyrus-imapd allows escalation from cyrus to root9.8 Critical
- century systems co., ltd. futurenet nxr-120/c, futurenet nxr-1200, futurenet nxr-125/cx +29 more +31 moreUNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR...6.2 Medium
- aws serverless application model command line interfacePath Traversal in AWS SAM CLI allows file copy to local cache6.9 Medium
- aws serverless application model command line interfacePath Traversal in AWS SAM CLI allows file copy to build container6.9 Medium
- zip-rs zip2zip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File Write7.3 High
- acronis backup extension for plesk, backup plugin for cpanel & whm +1 moreArbitrary file overwrite during home directory recovery due to improper symbolic link handling....4.4 Medium
- zoom communications, inc apps for macos, zoom meeting software development kit, rooms +2 more +4 moreZoom Apps for macOS - Symbolic Link Following5.4 Medium
- dell supportassist os recoveryDell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack...7.0 High
- pwncollege dojopwn.college has Symlink LFI in Dojo repos7.7 High
- github.com/golang/glogVulnerability when creating log files in github.com/golang/glog7.1 High
- Show moreLoading…