Falhas do tipo CWE-59

823 resultados

Seguimento de links simbólicos (symlink)

A aplicação segue links simbólicos sem validação, permitindo que um atacante redirecione operações de arquivo para locais não autorizados. Isso pode resultar em leitura, modificação ou exclusão de arquivos sensíveis fora do diretório esperado.

Exemplo

Um servidor web processa uploads em /tmp/uploads/, mas não verifica se os caminhos são links simbólicos. Um atacante cria um symlink em /tmp/uploads/config que aponta para /etc/passwd, e a aplicação sobrescreve o arquivo de senhas do sistema.

Como mitigar

Use funções que resolvem caminhos canônicos (realpath em C, Path.toRealPath() em Java) antes de qualquer operação com arquivo, e implemente verificações de TOCTOU (time-of-check-time-of-use). Mantenha operações sensíveis em diretórios controlados com permissões restritivas e evite processar symlinks vindos de áreas com controle de usuário.

CVE-2026-64615LOWData::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOWEPSS 0.1%CVE-2026-15682MEDIUMAnyDesk Support Information Link Following Denial-of-Service VulnerabilityEPSS 0.1%CVE-2026-18508MEDIUMTar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwriteEPSS 0.1%CVE-2026-15681MEDIUMAnyDesk Screen Recording Link Following Denial-of-Service VulnerabilityEPSS 0.1%CVE-2025-46293MEDIUMThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protectEPSS 0.1%CVE-2026-53799HIGHrsync < 3.5.0 Symlink Race Condition via ACL/xattr ApplicationEPSS 0.1%CVE-2026-87766HIGHBubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setupEPSS 0.1%CVE-2025-43726MEDIUMDell Alienware Command Center 5.x (AWCC), versions prior to 5.10.2.0, contains an Improper Link Resolution Before File Access ('Link FollowiEPSS 0.1%CVE-2026-34452MEDIUMClaude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox EscapeEPSS 0.1%CVE-2026-71181LOWDell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerEPSS 0.1%CVE-2026-7397MEDIUMNousResearch hermes-agent file_tools.py _check_sensitive_path symlinkEPSS 0.1%CVE-2026-71182LOWDell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerEPSS 0.1%CVE-2025-41421MEDIUMPrivilege Escalation via Symbolic Link Spoofing in TeamViewer ClientEPSS 0.1%CVE-2026-12410HIGHCCleaner local privilege escalation via link following on uninstallEPSS 0.1%CVE-2026-12503CRITICALLoytec LINX firmware: Improper Link Resolution in /usr/bin/larm_starterEPSS 0.1%CVE-2026-43619HIGHRsync < 3.4.3 Symlink Race Condition via Path-Based SyscallsEPSS 0.1%CVE-2025-13154MEDIUMAn improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated locaEPSS 0.1%CVE-2026-81727MEDIUMNLTK before 3.10.3 Hardlink File Overwrite via downloaderEPSS 0.1%CVE-2025-36611HIGHDell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access ('LinEPSS 0.1%CVE-2026-31990MEDIUMOpenClaw < 2026.3.2 - Symlink Traversal in stageSandboxMedia DestinationEPSS 0.1%