CVE-2026-53562: CWE-59 Improper link resolution before file access ('link following') in Citrix UniconOS

CVE-2026-53562 is a CWE-59 improper link resolution vulnerability in Citrix UniconOS. It occurs when the system improperly resolves symbolic links before accessing files, which can lead to unintended file access or manipulation. The vulnerability affects UniconOS versions prior to 2607 CR and 2603 LTSR CU2. The CVSS 4.0 base score is 8.5, indicating high severity, with attack vector local, low attack complexity, no user interaction, and privileges required at low level. The vulnerability impacts confidentiality, integrity, and availability with high impact metrics. No patch or remediation details are provided in the input data.

An attacker with local low-level privileges could exploit this vulnerability to cause improper file access by manipulating symbolic links. This may lead to unauthorized disclosure, modification, or disruption of system files or data. The high CVSS score reflects significant potential impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Citrix advisories for updates. Until a fix is available, limit local user privileges and restrict access to sensitive files to reduce risk.