Weaknesses of type CWE-59

823 results

Seguimento inseguro de links simbólicos

Ocorre quando uma aplicação segue um link simbólico (symlink) sem validar se o destino é legítimo, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Um processo com privilégio elevado que acessa `/tmp/arquivo` pode ser redirecionado por um symlink malicioso para ler ou modificar `/etc/passwd`, por exemplo.

Example

Um script root copia logs da aplicação de `/tmp/app.log` para `/var/log/backup.log`. Um atacante cria um symlink `/tmp/app.log` → `/etc/shadow` e aguarda a execução do script; o arquivo sensível é então copiado e exposto.

How to mitigate

Use APIs seguras como `O_NOFOLLOW` (em open/openat) ou `lstat()` para detectar symlinks antes de operar. Valide o proprietário e permissões de arquivos alvo, e armazene arquivos temporários em diretórios privados (não `/tmp`), com umask restritivo.

CVE-2025-12341HIGHermig1979 AntiDupl Delete Duplicate Image AntiDupl.NET.WinForms.exe link followingEPSS 0.2%CVE-2025-14693HIGHUgreen DH2100+ USB symlinkEPSS 0.2%CVE-2025-1683HIGHSymbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File DeletionEPSS 0.2%CVE-2024-13962HIGHLink Following Local Privilege Escalation Vulnerability in Avast Cleanup Premium Version 24.2.16593.17810EPSS 0.2%CVE-2023-28797MEDIUMLPE using arbitrary file delete with SymlinksEPSS 0.2%CVE-2024-13959HIGHLink Following Local Privilege Escalation Vulnerability in AVG TuneUp 24.2.16593.9844EPSS 0.2%CVE-2025-5296HIGHCWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written tEPSS 0.2%CVE-2024-9524HIGHPrivilege Escalation Vulnerability in Avira Prime Version 1.1.96.2EPSS 0.2%CVE-2022-0029MEDIUMCortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support FileEPSS 0.2%CVE-2025-43446MEDIUMThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS TahoeEPSS 0.2%CVE-2024-12552HIGHWacom Center WTabletServicePro Link Following Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2024-52522MEDIUMRclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadataEPSS 0.2%CVE-2024-13759HIGHLocal Privilege Escalation in Avira Prime 1.1.96.2 on Windows 10 x64EPSS 0.2%CVE-2025-64437MEDIUMKubeVirt Isolation Detection Flaw Allows Arbitrary File Permission ChangesEPSS 0.2%CVE-2025-11462CRITICALLocal Privilege Escalation Vulnerability in AWS Client VPN macOS ClientEPSS 0.2%CVE-2026-0827MEDIUMDuring an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in LenEPSS 0.2%CVE-2026-20633MEDIUMThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 2EPSS 0.2%CVE-2026-16077MEDIUMAstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link followingEPSS 0.2%CVE-2024-22038MEDIUMDoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridgeEPSS 0.2%CVE-2026-83999HIGHWindows Resilient File System (ReFS) Deduplication Service Elevation of Privilege VulnerabilityEPSS 0.2%