CWE-61.

Arbitrary host CRI log file read via symlink following in CRI checkpoint restore

• CWE-61

>=2.1.0, <2.1.9 || >=2.2.0, <2.2.5 || >=2.3.0, <2.3.2 · fixed in 2.1.9, 2.2.5, 2.3.2

OneDev: RCE through absolute-path symlink following allows low-privileged users to overwrite arbitrary server via TarUtils.untar

• onedev
• CWE-61

BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284

• Path traversal
• CWE-61

>=2.3.1, <2.8.5 · fixed in 2.8.5

Podman: WORKDIR symlink traversal vulnerability

• Path traversal
• CWE-61

<=3.4.7 · no fixed version yet

LiteSpeed Technologies cPanel Plugin: LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before…

• LiteSpeed Technologies cPanel Plugin
• CWE-61

This issue was addressed with improved handling of symlinks.

• Apple macOS
• CWE-61

PDM: Project-Local State and Config Writes Follow Symlinks

• CWE-61

<2.27.0 · fixed in 2.27.0

skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion

• Path traversal
• CWE-61

<0.1.2 · fixed in 0.1.2

Docker: Race condition in docker cp allows bind mount redirection to host path

• Race condition
• CWE-61

<=28.5.2 · no fixed version yet

Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

• Race condition
• CWE-61

<=28.5.2 · no fixed version yet

npitre cramfs-tools cramfsck.c change_file_status symlink

• npitre cramfs-tools
• Path traversal
• CWE-61

Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload

• givanz Vvveb
• Unrestricted file upload
• CWE-61

PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

• PostgreSQL
• CWE-61

pgAdmin 4 File Manager has symbolic-link path traversal

• CWE-61

<9.15 · fixed in 9.15

WebPros cPanel: A chmod call in the cPanel Nova plugin's Cpanel::Nova::Connector follows symlinks…

• WebPros cPanel
• WebPros cPanel (CloudLinux 6, CentOS 6)
• CWE-61

Tunnelblick arbitrary file read via symlink following in tunnelblickd

• Tunnelblick
• CWE-61

OpenClaw contains a symlink traversal vulnerability

• CWE-61

>=2026.3.22, <2026.4.5 · fixed in 2026.4.5

IObit Advanced SystemCare Service ASC.exe symlink

• IObit Advanced SystemCare
• Path traversal
• CWE-61

Kata Container has CopyFile Policy Subversion via Symlinks

• CWE-61
• CWE-1220

<0.0.0-20260422180503-1b9e49eb2763 · fixed in 0.0.0-20260422180503-1b9e49eb2763

NousResearch hermes-agent file_tools.py _check_sensitive_path symlink

• NousResearch hermes-agent
• Path traversal
• CWE-61

zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write

• Path traversal
• CWE-61

<=1.1.11 · no fixed version yet

uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue

• CWE-61

<0.8.0 · fixed in 0.8.0

Claude Code: Sandbox Escape via Symlink Following Allows Arbitrary File Write Outside Workspace

• Path traversal
• CWE-61

<2.1.64 · fixed in 2.1.64

python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback

• Path traversal
• CWE-61

<1.2.2 · fixed in 1.2.2

Flatpak xdg-desktop-portal: Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app…

• Flatpak xdg-desktop-portal
• CWE-61

Duplicate Advisory: OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)

• CWE-61

<=2026.2.22 · no fixed version yet

Junos OS: A low privileged user can escalate their privileges so that they can login as root

• Juniper Networks Junos OS
• CWE-61

Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination

• nix
• CWE-61

LiquidJS: Root restriction bypass for partial and layout loading through symlinked templates

• CWE-61

<10.25.3 · fixed in 10.25.3

Flatpak has a complete sandbox escape leading to host file access and code execution in the host context

• flatpak
• Path traversal
• CWE-61

OpenClaw: SSH sandbox tar upload follows symlinks, enabling arbitrary file write on remote host

• Path traversal
• CWE-61

<2026.3.31 · fixed in 2026.3.31

ONNX: External Data Symlink Traversal

• Path traversal
• CWE-61

<1.21.0 · fixed in 1.21.0

ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load

• Path traversal
• CWE-61

<1.21.0 · fixed in 1.21.0

Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability.

• Dell AppSync
• CWE-61

onnx Vulnerable to Path Traversal via Symlink

• Path traversal
• CWE-61

<1.21.0 · fixed in 1.21.0

Incus vulnerable to local privilege escalation through VM screenshot path

• CWE-61

<6.23.0 · fixed in 6.23.0

OpenClaw: Symlink Traversal via IDENTITY.md appendFile in agents.create/update (Incomplete Fix for CVE-2026-32013)

• CWE-61

<=2026.2.22 · no fixed version yet

This issue was addressed with improved handling of symlinks.

• Apple iOS and iPadOS
• Apple macOS
• CWE-61

tar-rs `unpack_in` can chmod arbitrary directories by following symlinks

• CWE-61

<0.4.45 · fixed in 0.4.45

Jenkins has a link following vulnerability allows arbitrary file creation

• Path traversal
• CWE-61

<2.555 · fixed in 2.555

Fortinet FortiClientLinux: A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0…

• Fortinet FortiClientLinux
• CWE-61

Zed Extension Sandbox Escape via Tar Symlink Following

• zed
• CWE-61

OpenClaw: Reject symlinks in local skill packaging script

• CWE-61

<2026.2.19 · fixed in 2026.2.19

Claude Code has Permission Deny Bypass Through Symbolic Links

• Broken access control
• CWE-61

<2.1.7 · fixed in 2.1.7

Arbitrary Host File Overwrite via Symlink in Firecracker Jailer

• AWS Firecracker
• CWE-61

@backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass

• Path traversal
• CWE-61

<0.1.17 · fixed in 0.1.17

Copier safe template has arbitrary filesystem write access via directory symlinks when _preserve_symlinks: true

• CWE-61

<9.11.2 · fixed in 9.11.2

Copier safe template has arbitrary filesystem read access via symlinks when _preserve_symlinks: false

• CWE-61

<9.11.2 · fixed in 9.11.2

Forgejo: Forgejo before 13.0.2 allows attackers to write to unintended files…

• Forgejo
• CWE-61

NVIDIA Resiliency Extension: NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation…

• NVIDIA Resiliency Extension
• CWE-61

Ugreen DH2100+ USB symlink

• Ugreen DH2100+
• Path traversal
• CWE-61

Static Web Server vulnerable to a symbolic link path traversal

• CWE-61

<2.40.1 · fixed in 2.40.1

Singularity ineffectively applies of selinux / apparmor LSM process labels in github.com/sylabs/singularity

• CWE-61
• CWE-706

* · no fixed version yet

Apptainer ineffectively applies selinux and apparmor --security options in github.com/apptainer/apptainer

• CWE-61
• CWE-706

<1.4.5 · fixed in 1.4.5

Plesk: WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote…

• Plesk
• CWE-61

Open OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU)

• OSC ondemand
• Race condition
• CWE-61

youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

• CWE-61
• CWE-363

<0.5.7 · fixed in 0.5.7

youki container escape via "masked path" abuse due to mount race conditions

• CWE-61
• CWE-363

<0.5.7 · fixed in 0.5.7

runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects

• CWE-61
• CWE-363

<1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3 · fixed in 1.2.8, 1.3.3, 1.4.0-rc.3

runc container escape with malicious config due to /dev/console mount and related races

• CWE-61
• CWE-363

>=1.0.0-rc3, <1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3 · fixed in 1.2.8, 1.3.3, 1.4.0-rc.3