CVE-2026-75038 is a CWE-61 vulnerability in the LACT project by ilya-zlobintsev, involving unsafe handling of UNIX symbolic links. This vulnerability permits a local attacker with low privileges to trigger a denial-of-service by exploiting symlink following behavior. The affected versions include all releases up to and including 0.10.0. The CVSS 3.1 base score is 6.1, reflecting medium severity with local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact. No vendor advisory or patch information is currently available.

The vulnerability allows a local attacker to cause a denial-of-service condition, impacting the availability of the affected system or application. There is no impact on confidentiality, and only a low impact on integrity is noted. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only to mitigate risk.