Weaknesses of type CWE-59

823 results

Seguimento inseguro de links simbólicos

Ocorre quando uma aplicação segue um link simbólico (symlink) sem validar se o destino é legítimo, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Um processo com privilégio elevado que acessa `/tmp/arquivo` pode ser redirecionado por um symlink malicioso para ler ou modificar `/etc/passwd`, por exemplo.

Example

Um script root copia logs da aplicação de `/tmp/app.log` para `/var/log/backup.log`. Um atacante cria um symlink `/tmp/app.log` → `/etc/shadow` e aguarda a execução do script; o arquivo sensível é então copiado e exposto.

How to mitigate

Use APIs seguras como `O_NOFOLLOW` (em open/openat) ou `lstat()` para detectar symlinks antes de operar. Valide o proprietário e permissões de arquivos alvo, e armazene arquivos temporários em diretórios privados (não `/tmp`), com umask restritivo.

CVE-2026-78409HIGHUtil-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinksEPSS 0.1%CVE-2025-53594MEDIUMQfinder Pro, Qsync, QVPNEPSS 0.1%CVE-2026-61859MEDIUMImageMagick before 7.1.2-26 Policy Bypass via script operationEPSS 0.1%CVE-2026-58198MEDIUMChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainerEPSS 0.1%CVE-2026-56796MEDIUMDell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.EPSS 0.1%CVE-2026-65065MEDIUMData::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOWEPSS 0.1%CVE-2026-6891MEDIUMImproper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with lEPSS 0.1%CVE-2026-6892MEDIUMImproper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges toEPSS 0.1%CVE-2026-15059MEDIUMsystemd-oomd: unprivileged users can terminate arbitrary processesEPSS 0.1%CVE-2026-12036MEDIUMAn improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could alEPSS 0.1%CVE-2026-88265MEDIUMCrun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chownEPSS 0.1%CVE-2026-27456MEDIUMutil-linux: TOCTOU Race Condition in util-linux mount(8) - Loop Device SetupEPSS 0.1%CVE-2026-17435LOWFile::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating filesEPSS 0.1%CVE-2026-88264MEDIUMCrun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfsEPSS 0.1%CVE-2026-64616LOWData::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOWEPSS 0.1%CVE-2026-53766MEDIUMchrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing rootsEPSS 0.1%CVE-2026-15994HIGHDuring an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial VantEPSS 0.1%CVE-2026-4135MEDIUMDuring an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could alloEPSS 0.1%CVE-2026-40717MEDIUMDell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privilEPSS 0.1%CVE-2026-86469MEDIUMGlib2: toctou symlink race in `g_file_create_replace_destination` fallback pathEPSS 0.1%