CWE-61.

runc container escape via "masked path" abuse due to mount race conditions

• CWE-61
• CWE-363

<1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3 · fixed in 1.2.8, 1.3.3, 1.4.0-rc.3

Dell SupportAssist for Home PCs: SupportAssist for Home PCs versions 4.8.2 and prior and SupportAssist for Business PCs…

• Dell SupportAssist for Home PCs
• Dell SupportAssist for Business PCs
• CWE-61

wonderwhy-er DesktopCommanderMCP filesystem.ts isPathAllowed symlink

• wonderwhy-er DesktopCommanderMCP
• Path traversal
• CWE-61

Claude Code permission deny bypass through symlink

• CWE-61

<1.0.120 · fixed in 1.0.120

SUSE-specific logrotate configuration allows escalation from mail user/group to root

• openSUSE Tumbleweed
• CWE-61

tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball

• Path traversal
• CWE-61

<1.16.6 || >=2.0.0, <2.1.4 || >=3.0.0, <3.1.1 · fixed in 1.16.6, 2.1.4, 3.1.1

astral-tokio-tar has a path traversal in tar extraction

• Path traversal
• CWE-61

<0.5.4 · fixed in 0.5.4

Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices

• CWE-61

podman kube play symlink traversal vulnerability

• Path traversal
• CWE-61

<=4.9.5 · no fixed version yet

openSUSE Tumbleweed: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE…

• openSUSE Tumbleweed
• CWE-61

Airlink's Daemon Symlink Vulnerability

• airlinklabs daemon
• CWE-61

n8n symlink traversal vulnerability in "Read/Write File" node allows access to restricted files

• Path traversal
• CWE-61

<1.106.0 · fixed in 1.106.0

Youki: If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.

• CWE-61

<0.5.5 · fixed in 0.5.5

Unsafe symlink following in restricted workspace-write sandbox leads to RCE

• CWE-61

Ivanti Connect Secure: Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or…

• Ivanti Connect Secure
• Ivanti Policy Secure
• CWE-61

Dell Encryption Admin Utilities: Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link…

• Dell Encryption Admin Utilities
• CWE-61

daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

• openSUSE Tumbleweed
• CWE-61

iwasm vulnerable to filesystem sandbox escape with symlink when using uvwasi feature

• bytecodealliance wasm-micro-runtime
• CWE-61

RCE In Google Web Designer

• Google Web Designer
• CWE-61

UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers.

• Century Systems Co., Ltd. FutureNet NXR-1420
• Century Systems Co., Ltd. FutureNet NXR-1300 series
• CWE-61

AWS SAM CLI Path Traversal allows file copy to local cache

• Path traversal
• CWE-61

<1.134.0 · fixed in 1.134.0

AWS SAM CLI Path Traversal allows file copy to build container

• Path traversal
• CWE-61

<1.133.0 · fixed in 1.133.0

Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write

• Path traversal
• CWE-61

>=1.3.0, <2.3.0 · fixed in 2.3.0

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling.

• Acronis Backup plugin for cPanel & WHM
• Acronis Backup extension for Plesk
• CWE-61

Zoom Apps for macOS - Symbolic Link Following

• Zoom Communications, Inc Zoom Apps for macOS
• CWE-61

Dell SupportAssist OS Recovery: Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack…

• Dell SupportAssist OS Recovery
• CWE-61

pwn.college has Symlink LFI in Dojo repos

• pwncollege dojo
• Information disclosure
• CWE-61

Insecure Temporary File usage in github.com/golang/glog

• CWE-61
• CWE-377

<1.2.4 · fixed in 1.2.4

Remote Command Execution in file editing in gogs in gogs.io/gogs

• Path traversal
• CWE-61

<0.13.1 · fixed in 0.13.1

Dell SupportAssist for Home PCs: Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for…

• Dell SupportAssist for Home PCs
• Dell SupportAssist for Business PCs
• CWE-61

Pagure: generate_archive() follows symbolic links in temporary clones

• CWE-61

Dell Inventory Collector Client: Dell Inventory Collector Client, versions prior to 12.7.0…

• Dell Inventory Collector Client
• CWE-61

Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability.

• Dell AppSync
• CWE-61

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability.

• Dell Client Platform BIOS
• CWE-61

readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

• dest-unreach socat
• CWE-61

Rclone has Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata

• Path traversal
• CWE-61

>=1.59.0, <1.68.2 · fixed in 1.68.2

Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

• Cisco TelePresence Endpoint Software (TC/CE)
• CWE-61

Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

• Cisco RoomOS Software
• Cisco TelePresence Endpoint Software (TC/CE)
• CWE-61

Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

• Cisco RoomOS Software
• Cisco TelePresence Endpoint Software (TC/CE)
• CWE-61

Sensitive information disclosure during file browsing due to improper symbolic link handling.

• Acronis Backup plugin for cPanel & WHM
• CWE-61

Arbitrary file overwrite during recovery due to improper symbolic link handling.

• Acronis Backup plugin for cPanel & WHM
• Acronis Backup extension for Plesk
• CWE-61

NVIDIA Container Toolkit: NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability…

• NVIDIA Container Toolkit
• NVIDIA GPU Operator
• CWE-61

Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. in github.com/codeclysm/extract

• Path traversal
• CWE-61

* · no fixed version yet

This issue was addressed with improved handling of symlinks.

• Apple macOS
• CWE-61

runc can be confused to create empty files/directories on the host

• CWE-61
• CWE-363

<1.1.14 || >=1.2.0-rc.1, <1.2.0-rc.3 · fixed in 1.1.14, 1.2.0-rc.3

Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link…

• Dell PowerScale OneFS
• CWE-61

Kubernetes kubectl cp Vulnerable to Symlink Attack in k8s.io/kubernetes

• CWE-61

>=1.13.10, <1.13.11 || >=1.14.6, <1.14.7 || >=1.15.3, <1.16.0 · fixed in 1.13.11, 1.14.7, 1.16.0

Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server in github.com/argoproj/argo-cd

• CWE-20
• CWE-61

>=1.3.0 · no fixed version yet

In aiohttp, compressed files as symlinks are not protected from path traversal

• CWE-61

>=3.10.0b1, <3.10.2 · fixed in 3.10.2

This issue was addressed with improved validation of symlinks.

• Apple macOS
• CWE-61

Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link

• judge0
• Path traversal
• CWE-61

Judge0 vulnerable to Sandbox Escape via Symbolic Link

• judge0
• Path traversal
• CWE-61

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete.

• CWE-61

Dell PowerScale OneFS: Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link…

• Dell PowerScale OneFS
• CWE-61

Dell PowerScale OneFS: Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link…

• Dell PowerScale OneFS
• CWE-61

ZSATrayManager Arbitrary File Deletion

• Zscaler Client Connector
• CWE-61

Improper symlink resolution in TeamViewer Remote client for macOS

• TeamViewer Remote Client
• CWE-61

This issue was addressed with improved handling of symlinks.

• Apple macOS
• CWE-61

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installati…

• Dell Encryption, Dell Endpoint Security Suite Enterprise, Dell Security Management Server (Windows)
• CWE-61

Arbitrary File Creation in AbstractUnArchiver

• Path traversal
• CWE-61

<4.8.0 · fixed in 4.8.0