Weaknesses of type CWE-59

823 results

Seguimento inseguro de links simbólicos

Ocorre quando uma aplicação segue um link simbólico (symlink) sem validar se o destino é legítimo, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Um processo com privilégio elevado que acessa `/tmp/arquivo` pode ser redirecionado por um symlink malicioso para ler ou modificar `/etc/passwd`, por exemplo.

Example

Um script root copia logs da aplicação de `/tmp/app.log` para `/var/log/backup.log`. Um atacante cria um symlink `/tmp/app.log` → `/etc/shadow` e aguarda a execução do script; o arquivo sensível é então copiado e exposto.

How to mitigate

Use APIs seguras como `O_NOFOLLOW` (em open/openat) ou `lstat()` para detectar symlinks antes de operar. Valide o proprietário e permissões de arquivos alvo, e armazene arquivos temporários em diretórios privados (não `/tmp`), com umask restritivo.

CVE-2026-64615LOWData::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOWEPSS 0.1%CVE-2026-15682MEDIUMAnyDesk Support Information Link Following Denial-of-Service VulnerabilityEPSS 0.1%CVE-2026-18508MEDIUMTar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwriteEPSS 0.1%CVE-2026-15681MEDIUMAnyDesk Screen Recording Link Following Denial-of-Service VulnerabilityEPSS 0.1%CVE-2025-46293MEDIUMThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protectEPSS 0.1%CVE-2026-53799HIGHrsync < 3.5.0 Symlink Race Condition via ACL/xattr ApplicationEPSS 0.1%CVE-2026-87766HIGHBubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setupEPSS 0.1%CVE-2025-43726MEDIUMDell Alienware Command Center 5.x (AWCC), versions prior to 5.10.2.0, contains an Improper Link Resolution Before File Access ('Link FollowiEPSS 0.1%CVE-2026-34452MEDIUMClaude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox EscapeEPSS 0.1%CVE-2026-71181LOWDell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerEPSS 0.1%CVE-2026-7397MEDIUMNousResearch hermes-agent file_tools.py _check_sensitive_path symlinkEPSS 0.1%CVE-2026-71182LOWDell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerEPSS 0.1%CVE-2025-41421MEDIUMPrivilege Escalation via Symbolic Link Spoofing in TeamViewer ClientEPSS 0.1%CVE-2026-12410HIGHCCleaner local privilege escalation via link following on uninstallEPSS 0.1%CVE-2026-12503CRITICALLoytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starterEPSS 0.1%CVE-2026-43619HIGHRsync < 3.4.3 Symlink Race Condition via Path-Based SyscallsEPSS 0.1%CVE-2025-13154MEDIUMAn improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated locaEPSS 0.1%CVE-2026-81727MEDIUMNLTK before 3.10.3 Hardlink File Overwrite via downloaderEPSS 0.1%CVE-2025-36611HIGHDell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access ('LinEPSS 0.1%CVE-2026-31990MEDIUMOpenClaw < 2026.3.2 - Symlink Traversal in stageSandboxMedia DestinationEPSS 0.1%