# CWE-363.

Every Advisory and CVE whose sources give the weakness CWE-363, newest first.

## Records, newest first

- [filelock: StrictSoftFileLock follows a symbolic link swapped in at \<path>.filelock and creates claim files in a directory another local user chooses](https://agentprime.io/advisories/GHSA-m462-7rxw-wvpg.md)
  `GHSA-m462-7rxw-wvpg`, `CVE-2026-112938` · PyPI `filelock`: affected `>=3.30.0, <4.2.1`, fixed in `4.2.1` · CVSS 5.8 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-363
- [filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory](https://agentprime.io/advisories/GHSA-crv4-6mhj-j5jh.md)
  `GHSA-crv4-6mhj-j5jh`, `CVE-2026-112914` · PyPI `filelock`: affected `>=4.1.0, <4.2.1`, fixed in `4.2.1` · CVSS 5.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Path traversal, CWE-363
- [filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files](https://agentprime.io/advisories/GHSA-v4x8-3wr5-3wq8.md)
  `GHSA-v4x8-3wr5-3wq8`, `CVE-2026-112940` · PyPI `filelock`: affected `>=3.20.4, <4.2.1`, fixed in `4.2.1` · CVSS 7.1 High · Not analysed yet · Published 23 Oct 2026 · Tags: Path traversal, CWE-363
- [Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition](https://agentprime.io/advisories/CVE-2026-91203.md)
  `CVE-2026-91203` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-363
- [Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race](https://agentprime.io/advisories/CVE-2026-91205.md)
  `CVE-2026-91205` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-363
- [Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).](https://agentprime.io/advisories/CVE-2026-71125.md)
  `CVE-2026-71125` · CVE record: Oracle Corporation Oracle VM VirtualBox · CVSS 6.1 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-363
- [HP Image Assistant - Potential Escalation of Privilege](https://agentprime.io/advisories/CVE-2025-13492.md)
  `CVE-2025-13492` · CVE record: HP Inc HP Image Assistant · CVSS 5.4 Medium · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-363
- [youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects](https://agentprime.io/advisories/GHSA-vf95-55w6-qmrf.md)
  `GHSA-vf95-55w6-qmrf`, `CVE-2025-62596` · crates.io `youki`: affected `<0.5.7`, fixed in `0.5.7` · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [youki container escape via "masked path" abuse due to mount race conditions](https://agentprime.io/advisories/GHSA-4g74-7cff-xcv8.md)
  `GHSA-4g74-7cff-xcv8`, `CVE-2025-62161` · crates.io `youki`: affected `<0.5.7`, fixed in `0.5.7` · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects](https://agentprime.io/advisories/GHSA-cgrx-mc8f-2prm.md)
  `GHSA-cgrx-mc8f-2prm`, `CVE-2025-52881`, `GO-2025-4098` · Go `github.com/opencontainers/runc` and 1 more: affected `<1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3`, fixed in `1.2.8`, `1.3.3`, `1.4.0-rc.3` · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [runc container escape with malicious config due to /dev/console mount and related races](https://agentprime.io/advisories/GHSA-qw9x-cqr3-wc7r.md)
  `GHSA-qw9x-cqr3-wc7r`, `CVE-2025-52565`, `GO-2025-4097` · Go `github.com/opencontainers/runc`: affected `>=1.0.0-rc3, <1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3`, fixed in `1.2.8`, `1.3.3`, `1.4.0-rc.3` · CVSS 8.4 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [runc container escape via "masked path" abuse due to mount race conditions](https://agentprime.io/advisories/GHSA-9493-h29p-rfm2.md)
  `GHSA-9493-h29p-rfm2`, `CVE-2025-31133`, `GO-2025-4096` · Go `github.com/opencontainers/runc`: affected `<1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3`, fixed in `1.2.8`, `1.3.3`, `1.4.0-rc.3` · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [runc can be confused to create empty files/directories on the host](https://agentprime.io/advisories/GHSA-jfvp-7x6p-h2pv.md)
  `GHSA-jfvp-7x6p-h2pv`, `CVE-2024-45310`, `GO-2024-3110` · Go `github.com/opencontainers/runc`: affected `<1.1.14 || >=1.2.0-rc.1, <1.2.0-rc.3`, fixed in `1.1.14`, `1.2.0-rc.3` · CVSS 3.6 Low · Not analysed yet · Published 3 Sept 2024 · Tags: CWE-61, CWE-363
- [Pterodactyl Wings vulnerable to improper isolation of server file access](https://agentprime.io/advisories/GHSA-494h-9924-xww9.md)
  `GHSA-494h-9924-xww9`, `CVE-2024-27102`, `GO-2024-2642` · Go `github.com/pterodactyl/wings`: affected `<1.11.9`, fixed in `1.11.9` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Mar 2024 · Tags: Path traversal, Race condition, CWE-363
- [Race condition in std::fs::remove_dir_all in rustlang](https://agentprime.io/advisories/CVE-2022-21658.md)
  `CVE-2022-21658` · CVE record: rust-lang rust · CVSS 7.3 High · Not analysed yet · Published 20 Jan 2022 · Tags: Race condition, CWE-363
- [Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability](https://agentprime.io/advisories/CVE-2018-6693.md)
  `CVE-2018-6693` · CVE record: McAfee Endpoint Security for Linux Threat Prevention (ENSLTP) · CVSS 5.6 Medium · Not analysed yet · Published 18 Sept 2018 · Tags: CWE-274, CWE-363

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-363>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-363/>. Everything for agents: <https://agentprime.io/llms.txt>.