CVE-2026-69771: CWE-59: Improper Link Resolution Before File Access ('Link Following') in Microsoft Windows 11 version 23H2

This vulnerability (CVE-2026-69771) is classified under CWE-59 (Improper Link Resolution Before File Access). It affects the Windows Container Manager Service in Windows 11 version 23H2. The flaw allows an authorized local attacker with low privileges to bypass a security feature by exploiting improper handling of symbolic links or similar link types before accessing files. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity and low privileges, does not require user interaction, and impacts confidentiality with no impact on integrity or availability. Microsoft has published an official fix for the affected versions.

An authorized local attacker can bypass a security feature due to improper link resolution in the Windows Container Manager Service. This could lead to unauthorized access to sensitive information (confidentiality impact). There is no reported impact on system integrity or availability. No known exploits are currently in the wild.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security updates provided by Microsoft for Windows 11 version 23H2 to remediate this issue. No additional mitigation steps are indicated by the vendor advisory.