# CWE-61.

Every Advisory and CVE whose sources give the weakness CWE-61, newest first.

## Records, newest first (an older page)

- [Arbitrary host CRI log file read via symlink following in CRI checkpoint restore](https://agentprime.io/advisories/GHSA-rgh6-rfwx-v388.md)
  `GHSA-rgh6-rfwx-v388`, `CVE-2026-53489`, `GO-2026-5622` · Go `github.com/containerd/containerd/v2`: affected `>=2.1.0, <2.1.9 || >=2.2.0, <2.2.5 || >=2.3.0, <2.3.2`, fixed in `2.1.9`, `2.2.5`, `2.3.2` · CVSS 8.2 High · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-61
- [OneDev: RCE through absolute-path symlink following allows low-privileged users to overwrite arbitrary server via TarUtils.untar](https://agentprime.io/advisories/CVE-2026-49248.md)
  `CVE-2026-49248` · CVE record: theonedev onedev · CVSS 8.3 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-61
- [BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284](https://agentprime.io/advisories/GHSA-3vgw-585j-4m45.md)
  `GHSA-3vgw-585j-4m45`, `CVE-2026-12565`, `PYSEC-2026-2392` · PyPI `bbot`: affected `>=2.3.1, <2.8.5`, fixed in `2.8.5` · CVSS 5.3 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Path traversal, CWE-61
- [Podman: WORKDIR symlink traversal vulnerability](https://agentprime.io/advisories/GHSA-q6r4-3wmg-fwcq.md)
  `GHSA-q6r4-3wmg-fwcq`, `CVE-2026-55686`, `GO-2026-5568` · Go `github.com/containers/podman/v3` and 2 more: affected `<=3.4.7`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Path traversal, CWE-61
- [LiteSpeed Technologies cPanel Plugin: LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before…](https://agentprime.io/advisories/CVE-2026-54420.md)
  `CVE-2026-54420` · CVE record: LiteSpeed Technologies cPanel Plugin · CVSS 8.5 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Jun 2026 · Tags: CWE-61
- [This issue was addressed with improved handling of symlinks.](https://agentprime.io/advisories/CVE-2025-43278.md)
  `CVE-2025-43278` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-61
- [PDM: Project-Local State and Config Writes Follow Symlinks](https://agentprime.io/advisories/GHSA-ghq2-5c67-fprm.md)
  `GHSA-ghq2-5c67-fprm`, `CVE-2026-47763`, `PYSEC-2026-2862` · PyPI `pdm`: affected `<2.27.0`, fixed in `2.27.0` · CVSS 6.8 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-61
- [skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion](https://agentprime.io/advisories/GHSA-wx3m-whqv-xv47.md)
  `GHSA-wx3m-whqv-xv47` · crates.io `skillctl`: affected `<0.1.2`, fixed in `0.1.2` · CVSS 4.0, no score published · Not analysed yet · Published 5 Jun 2026 · Tags: Path traversal, CWE-61
- [Docker: Race condition in docker cp allows bind mount redirection to host path](https://agentprime.io/advisories/GHSA-rg2x-37c3-w2rh.md)
  `GHSA-rg2x-37c3-w2rh`, `CVE-2026-42306`, `GO-2026-5617` · Go `github.com/docker/docker` and 2 more: affected `<=28.5.2`, no fixed version yet · CVSS 7.2 High · Not analysed yet · Published 18 May 2026 · Tags: Race condition, CWE-61
- [Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap](https://agentprime.io/advisories/GHSA-vp62-88p7-qqf5.md)
  `GHSA-vp62-88p7-qqf5`, `CVE-2026-41568`, `GO-2026-5668` · Go `github.com/docker/docker` and 2 more: affected `<=28.5.2`, no fixed version yet · CVSS 6.1 Medium · Not analysed yet · Published 18 May 2026 · Tags: Race condition, CWE-61, CWE-81
- [npitre cramfs-tools cramfsck.c change_file_status symlink](https://agentprime.io/advisories/CVE-2026-8784.md)
  `CVE-2026-8784` · CVE record: npitre cramfs-tools · CVSS 4.6 Medium · Not analysed yet · Published 18 May 2026 · Tags: Path traversal, CWE-61
- [Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload](https://agentprime.io/advisories/CVE-2026-41937.md)
  `CVE-2026-41937` · CVE record: givanz Vvveb · CVSS 8.6 High · Not analysed yet · Published 14 May 2026 · Tags: Unrestricted file upload, CWE-61
- [PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice](https://agentprime.io/advisories/CVE-2026-6475.md)
  `CVE-2026-6475` · CVE record: PostgreSQL · CVSS 8.8 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-61
- [pgAdmin 4 File Manager has symbolic-link path traversal](https://agentprime.io/advisories/GHSA-hr4r-fwpv-c95j.md)
  `GHSA-hr4r-fwpv-c95j`, `CVE-2026-7819`, `PYSEC-2026-2868` · PyPI `pgadmin4`: affected `<9.15`, fixed in `9.15` · CVSS 7.2 High · Not analysed yet · Published 11 May 2026 · Tags: CWE-61
- [WebPros cPanel: A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks…](https://agentprime.io/advisories/CVE-2026-29203.md)
  `CVE-2026-29203` · CVE record: WebPros cPanel and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: CWE-61
- [Tunnelblick arbitrary file read via symlink following in tunnelblickd](https://agentprime.io/advisories/CVE-2026-31893.md)
  `CVE-2026-31893` · CVE record: Tunnelblick Tunnelblick · CVSS 6.8 Medium · Not analysed yet · Published 5 May 2026 · Tags: CWE-61
- [OpenClaw contains a symlink traversal vulnerability](https://agentprime.io/advisories/GHSA-35mw-5vvr-vrxc.md)
  `GHSA-35mw-5vvr-vrxc`, `CVE-2026-43570`, `GHSA-cr8r-7g2h-6wr6` · npm `openclaw`: affected `>=2026.3.22, <2026.4.5`, fixed in `2026.4.5` · CVSS 6.0 Medium · Not analysed yet · Published 5 May 2026 · Tags: CWE-61
- [IObit Advanced SystemCare Service ASC.exe symlink](https://agentprime.io/advisories/CVE-2026-7832.md)
  `CVE-2026-7832` · CVE record: IObit Advanced SystemCare · CVSS 7.3 High · Not analysed yet · Published 5 May 2026 · Tags: Path traversal, CWE-61
- [Kata Container has CopyFile Policy Subversion via Symlinks](https://agentprime.io/advisories/GHSA-q49m-57vm-c8cc.md)
  `GHSA-q49m-57vm-c8cc`, `CVE-2026-41326`, `GO-2026-5563` · Go `github.com/kata-containers/kata-containers`: affected `<0.0.0-20260422180503-1b9e49eb2763`, fixed in `0.0.0-20260422180503-1b9e49eb2763` · CVSS 8.2 High · Not analysed yet · Published 4 May 2026 · Tags: CWE-61, CWE-1220
- [NousResearch hermes-agent file_tools.py \_check_sensitive_path symlink](https://agentprime.io/advisories/CVE-2026-7397.md)
  `CVE-2026-7397` · CVE record: NousResearch hermes-agent · CVSS 4.8 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Path traversal, CWE-61
- [zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write](https://agentprime.io/advisories/GHSA-74m3-9qvm-rp9h.md)
  `GHSA-74m3-9qvm-rp9h`, `CVE-2026-42275`, `GO-2026-5203` · Go `github.com/openziti/zrok` and 1 more: affected `<=1.1.11`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 25 Apr 2026 · Tags: Path traversal, CWE-61
- [uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue](https://agentprime.io/advisories/GHSA-wq63-vh5h-pr5p.md)
  `GHSA-wq63-vh5h-pr5p`, `CVE-2026-35372` · crates.io `coreutils`: affected `<0.8.0`, fixed in `0.8.0` · CVSS 5.0 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-61
- [Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace](https://agentprime.io/advisories/GHSA-vp62-r36r-9xqp.md)
  `GHSA-vp62-r36r-9xqp`, `CVE-2026-39861` · npm `@anthropic-ai/claude-code`: affected `<2.1.64`, fixed in `2.1.64` · CVSS 7.7 High · Not analysed yet · Published 21 Apr 2026 · Tags: Path traversal, CWE-61
- [python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback](https://agentprime.io/advisories/GHSA-mf9w-mj56-hr94.md)
  `GHSA-mf9w-mj56-hr94`, `CVE-2026-28684`, `PYSEC-2026-2270` · PyPI `python-dotenv`: affected `<1.2.2`, fixed in `1.2.2` · CVSS 6.6 Medium · Not analysed yet · Published 21 Apr 2026 · Tags: Path traversal, CWE-61
- [Flatpak xdg-desktop-portal: Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app…](https://agentprime.io/advisories/CVE-2026-40354.md)
  `CVE-2026-40354` · CVE record: Flatpak xdg-desktop-portal · CVSS 2.9 Low · Not analysed yet · Published 11 Apr 2026 · Tags: CWE-61
- [Duplicate Advisory: OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)](https://agentprime.io/advisories/GHSA-pmf3-2q63-jmp6.md)
  `GHSA-pmf3-2q63-jmp6` · npm `openclaw`: affected `<=2026.2.22`, no fixed version yet · CVSS 7.1 High · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-61
- [Junos OS: A low privileged user can escalate their privileges so that they can login as root](https://agentprime.io/advisories/CVE-2026-21916.md)
  `CVE-2026-21916` · CVE record: Juniper Networks Junos OS · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-61
- [Nix sandbox escape: file write via symlink at FOD \`.tmp\` copy destination](https://agentprime.io/advisories/CVE-2026-39860.md)
  `CVE-2026-39860` · CVE record: NixOS nix · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-61
- [LiquidJS: Root restriction bypass for partial and layout loading through symlinked templates](https://agentprime.io/advisories/GHSA-56p5-8mhr-2fph.md)
  `GHSA-56p5-8mhr-2fph`, `CVE-2026-35525` · npm `liquidjs`: affected `<10.25.3`, fixed in `10.25.3` · CVSS 8.2 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-61
- [Flatpak has a complete sandbox escape leading to host file access and code execution in the host context](https://agentprime.io/advisories/CVE-2026-34078.md)
  `CVE-2026-34078` · CVE record: flatpak flatpak · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Apr 2026 · Tags: Path traversal, CWE-61
- [OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host](https://agentprime.io/advisories/GHSA-fv94-qvg8-xqpw.md)
  `GHSA-fv94-qvg8-xqpw`, `CVE-2026-41364` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 7.2 High · Not analysed yet · Published 2 Apr 2026 · Tags: Path traversal, CWE-61
- [ONNX: External Data Symlink Traversal](https://agentprime.io/advisories/GHSA-p433-9wv8-28xj.md)
  `GHSA-p433-9wv8-28xj`, `CVE-2026-34447`, `PYSEC-2026-104` · PyPI `onnx`: affected `<1.21.0`, fixed in `1.21.0` · CVSS 5.5 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Path traversal, CWE-61
- [ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load](https://agentprime.io/advisories/GHSA-cmw6-hcpp-c6jp.md)
  `GHSA-cmw6-hcpp-c6jp`, `CVE-2026-34446`, `PYSEC-2026-2241` · PyPI `onnx`: affected `<1.21.0`, fixed in `1.21.0` · CVSS 4.7 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Path traversal, CWE-61
- [Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability.](https://agentprime.io/advisories/CVE-2026-22767.md)
  `CVE-2026-22767` · CVE record: Dell AppSync · CVSS 7.3 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-61
- [onnx Vulnerable to Path Traversal via Symlink](https://agentprime.io/advisories/GHSA-3r9x-f23j-gc73.md)
  `GHSA-3r9x-f23j-gc73`, `CVE-2026-27489`, `PYSEC-2026-2239` · PyPI `onnx`: affected `<1.21.0`, fixed in `1.21.0` · CVSS 8.7 High · Not analysed yet · Published 31 Mar 2026 · Tags: Path traversal, CWE-61
- [Incus vulnerable to local privilege escalation through VM screenshot path](https://agentprime.io/advisories/GHSA-q9vp-3wcg-8p4x.md)
  `GHSA-q9vp-3wcg-8p4x`, `CVE-2026-33711`, `GO-2026-4885` · Go `github.com/lxc/incus/v6`: affected `<6.23.0`, fixed in `6.23.0` · CVSS 4.7 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: CWE-61
- [OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)](https://agentprime.io/advisories/GHSA-7xr2-q9vf-x4r5.md)
  `GHSA-7xr2-q9vf-x4r5`, `CVE-2026-35632` · npm `openclaw`: affected `<=2026.2.22`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-61
- [This issue was addressed with improved handling of symlinks.](https://agentprime.io/advisories/CVE-2026-20694.md)
  `CVE-2026-20694` · CVE record: Apple iOS and iPadOS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: CWE-61
- [tar-rs \`unpack_in\` can chmod arbitrary directories by following symlinks](https://agentprime.io/advisories/GHSA-j4xf-2g29-59ph.md)
  `GHSA-j4xf-2g29-59ph`, `CVE-2026-33056`, `RUSTSEC-2026-0067` · crates.io `tar`: affected `<0.4.45`, fixed in `0.4.45` · CVSS 5.1 Medium · Not analysed yet · Published 20 Mar 2026 · Tags: CWE-61
- [Jenkins has a link following vulnerability allows arbitrary file creation](https://agentprime.io/advisories/GHSA-r6qv-frpc-q66c.md)
  `GHSA-r6qv-frpc-q66c`, `BIT-jenkins-2026-33001`, `CVE-2026-33001` · Maven `org.jenkins-ci.main:jenkins-core`: affected `<2.555`, fixed in `2.555` · CVSS 8.8 High · Not analysed yet · Published 18 Mar 2026 · Tags: Path traversal, CWE-61
- [Fortinet FortiClientLinux: A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0…](https://agentprime.io/advisories/CVE-2026-24018.md)
  `CVE-2026-24018` · CVE record: Fortinet FortiClientLinux · CVSS 7.4 High · Not analysed yet · Published 10 Mar 2026 · Tags: CWE-61
- [Zed Extension Sandbox Escape via Tar Symlink Following](https://agentprime.io/advisories/CVE-2026-27976.md)
  `CVE-2026-27976` · CVE record: zed-industries zed · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-61
- [OpenClaw: Reject symlinks in local skill packaging script](https://agentprime.io/advisories/GHSA-r6h2-5gqq-v5v6.md)
  `GHSA-r6h2-5gqq-v5v6`, `CVE-2026-27485` · npm `openclaw`: affected `<2026.2.19`, fixed in `2026.2.19` · CVSS 4.6 Medium · Not analysed yet · Published 20 Feb 2026 · Tags: CWE-61
- [Claude Code has Permission Deny Bypass Through Symbolic Links](https://agentprime.io/advisories/GHSA-4q92-rfm6-2cqx.md)
  `GHSA-4q92-rfm6-2cqx`, `CVE-2026-25724` · npm `@anthropic-ai/claude-code`: affected `<2.1.7`, fixed in `2.1.7` · CVSS 2.3 Low · Not analysed yet · Published 6 Feb 2026 · Tags: Broken access control, CWE-61
- [Arbitrary Host File Overwrite via Symlink in Firecracker Jailer](https://agentprime.io/advisories/CVE-2026-1386.md)
  `CVE-2026-1386` · CVE record: AWS Firecracker · CVSS 6.0 Medium · Not analysed yet · Published 23 Jan 2026 · Tags: CWE-61
- [@backstage/cli-common has a possible \`resolveSafeChildPath\` Symlink Chain Bypass](https://agentprime.io/advisories/GHSA-2p49-45hj-7mc9.md)
  `GHSA-2p49-45hj-7mc9`, `CVE-2026-24047` · npm `@backstage/cli-common`: affected `<0.1.17`, fixed in `0.1.17` · CVSS 6.3 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: Path traversal, CWE-61
- [Copier safe template has arbitrary filesystem write access via directory symlinks when \_preserve_symlinks: true](https://agentprime.io/advisories/GHSA-4fqp-r85r-hxqh.md)
  `GHSA-4fqp-r85r-hxqh`, `CVE-2026-23986`, `PYSEC-2026-1272` · PyPI `copier`: affected `<9.11.2`, fixed in `9.11.2` · CVSS 6.9 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-61
- [Copier safe template has arbitrary filesystem read access via symlinks when \_preserve_symlinks: false](https://agentprime.io/advisories/GHSA-xjhm-gp88-8pfx.md)
  `GHSA-xjhm-gp88-8pfx`, `CVE-2026-23968`, `PYSEC-2026-1274` · PyPI `copier`: affected `<9.11.2`, fixed in `9.11.2` · CVSS 6.8 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-61
- [Forgejo: Forgejo before 13.0.2 allows attackers to write to unintended files…](https://agentprime.io/advisories/CVE-2025-68937.md)
  `CVE-2025-68937` · CVE record: Forgejo Forgejo · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Dec 2025 · Tags: CWE-61
- [NVIDIA Resiliency Extension: NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation…](https://agentprime.io/advisories/CVE-2025-33225.md)
  `CVE-2025-33225` · CVE record: NVIDIA Resiliency Extension · CVSS 8.4 High · Not analysed yet · Published 16 Dec 2025 · Tags: CWE-61
- [Ugreen DH2100+ USB symlink](https://agentprime.io/advisories/CVE-2025-14693.md)
  `CVE-2025-14693` · CVE record: Ugreen DH2100+ · CVSS 7.0 High · Not analysed yet · Published 15 Dec 2025 · Tags: Path traversal, CWE-61
- [Static Web Server vulnerable to a symbolic link path traversal](https://agentprime.io/advisories/GHSA-459f-x8vq-xjjm.md)
  `GHSA-459f-x8vq-xjjm`, `CVE-2025-67487` · crates.io `static-web-server`: affected `<2.40.1`, fixed in `2.40.1` · CVSS 5.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-61
- [Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity](https://agentprime.io/advisories/GHSA-wwrx-w7c9-rf87.md)
  `GHSA-wwrx-w7c9-rf87`, `CVE-2025-64750`, `GO-2025-4177` · Go `github.com/sylabs/singularity` and 1 more: affected `*`, no fixed version yet · CVSS 4.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-61, CWE-706
- [Apptainer ineffectively applies selinux and apparmor --security options in github.com/apptainer/apptainer](https://agentprime.io/advisories/GHSA-j3rw-fx6g-q46j.md)
  `GHSA-j3rw-fx6g-q46j`, `CVE-2025-65105`, `GO-2025-4176` · Go `github.com/apptainer/apptainer`: affected `<1.4.5`, fixed in `1.4.5` · CVSS 4.5 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-61, CWE-706
- [Plesk: WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote…](https://agentprime.io/advisories/CVE-2025-66431.md)
  `CVE-2025-66431` · CVE record: Plesk Plesk · CVSS 7.8 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-61
- [Open OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU)](https://agentprime.io/advisories/CVE-2025-62724.md)
  `CVE-2025-62724` · CVE record: OSC ondemand · CVSS 4.3 Medium · Not analysed yet · Published 20 Nov 2025 · Tags: Race condition, CWE-61
- [youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects](https://agentprime.io/advisories/GHSA-vf95-55w6-qmrf.md)
  `GHSA-vf95-55w6-qmrf`, `CVE-2025-62596` · crates.io `youki`: affected `<0.5.7`, fixed in `0.5.7` · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [youki container escape via "masked path" abuse due to mount race conditions](https://agentprime.io/advisories/GHSA-4g74-7cff-xcv8.md)
  `GHSA-4g74-7cff-xcv8`, `CVE-2025-62161` · crates.io `youki`: affected `<0.5.7`, fixed in `0.5.7` · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects](https://agentprime.io/advisories/GHSA-cgrx-mc8f-2prm.md)
  `GHSA-cgrx-mc8f-2prm`, `CVE-2025-52881`, `GO-2025-4098` · Go `github.com/opencontainers/runc` and 1 more: affected `<1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3`, fixed in `1.2.8`, `1.3.3`, `1.4.0-rc.3` · CVSS 7.3 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363
- [runc container escape with malicious config due to /dev/console mount and related races](https://agentprime.io/advisories/GHSA-qw9x-cqr3-wc7r.md)
  `GHSA-qw9x-cqr3-wc7r`, `CVE-2025-52565`, `GO-2025-4097` · Go `github.com/opencontainers/runc`: affected `>=1.0.0-rc3, <1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3`, fixed in `1.2.8`, `1.3.3`, `1.4.0-rc.3` · CVSS 8.4 High · Not analysed yet · Published 5 Nov 2025 · Tags: CWE-61, CWE-363

Newest: <https://agentprime.io/advisories/tag/cwe-61.md>
Older: <https://agentprime.io/advisories/tag/cwe-61.md?cursor=WyIyMDI1LTExLTA1VDE3OjM0OjQ5LjAwMDAwMFoiLCJHSFNBLXF3OXgtY3FyMy13YzdyIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-61&cursor=WyIyMDI2LTA2LTE5VDIyOjA4OjA4LjAwMDAwMFoiLCJHSFNBLXd2cmgtMmY0bS05MjR2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-61/?cursor=WyIyMDI2LTA2LTE5VDIyOjA4OjA4LjAwMDAwMFoiLCJHSFNBLXd2cmgtMmY0bS05MjR2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.