Weaknesses of type CWE-59

823 results

Seguimento inseguro de links simbólicos

Ocorre quando uma aplicação segue um link simbólico (symlink) sem validar se o destino é legítimo, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Um processo com privilégio elevado que acessa `/tmp/arquivo` pode ser redirecionado por um symlink malicioso para ler ou modificar `/etc/passwd`, por exemplo.

Example

Um script root copia logs da aplicação de `/tmp/app.log` para `/var/log/backup.log`. Um atacante cria um symlink `/tmp/app.log` → `/etc/shadow` e aguarda a execução do script; o arquivo sensível é então copiado e exposto.

How to mitigate

Use APIs seguras como `O_NOFOLLOW` (em open/openat) ou `lstat()` para detectar symlinks antes de operar. Valide o proprietário e permissões de arquivos alvo, e armazene arquivos temporários em diretórios privados (não `/tmp`), com umask restritivo.

CVE-2025-62364MEDIUMtext-generation-webui allows arbitrary file read via symbolic link uploadEPSS 0.6%CVE-2026-14904HIGHRES Auth.GetUserPrivateKey Arbitrary File ReadEPSS 0.6%CVE-2026-55108HIGHKubeVela Terraform remote loader DoS via unbounded file readEPSS 0.6%CVE-2022-38604HIGHWacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability.EPSS 0.6%CVE-2026-23879HIGHpy7zr: Arbitrary File Write VulnerabilityEPSS 0.6%CVE-2026-24842HIGHnode-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path TraversalEPSS 0.6%CVE-2025-47181HIGHMicrosoft Edge (Chromium-based) Update Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2023-36737HIGHAzure Network Watcher VM Agent Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-25718CRITICALGitea template repository generation mishandles symlinked pathsEPSS 0.6%CVE-2026-8170HIGHExtremeXOS Privilege Escalation via Symlink Following in File UtilitiesEPSS 0.6%CVE-2022-38482MEDIUMA link-manipulation issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP4.EPSS 0.6%CVE-2026-55607HIGHClaude Code: Sandbox Escape via Git Worktree Path Confusion Allows Unsandboxed Code ExecutionEPSS 0.6%CVE-2019-12749HIGHdbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in soEPSS 0.5%CVE-2025-71212HIGHA link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected instaEPSS 0.5%CVE-2023-38175HIGHMicrosoft Windows Defender Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2025-8959HIGHHashiCorp go-getter Vulnerable to Arbitrary Read through Symlink AttackEPSS 0.5%CVE-2026-24047MEDIUM@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain BypassEPSS 0.5%CVE-2017-15097MEDIUMPrivilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user accoEPSS 0.5%CVE-2023-21760HIGHWindows Print Spooler Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2021-47949HIGHCyberPanel 2.1 Authenticated Remote Code Execution via Symlink AttackEPSS 0.5%