CWE-59: Link Following vulnerabilities

The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.

apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before version 1.2.5, a crafted .apk could install a TypeSymlink tar entry whose target pointed outside the build root, and a subsequent directory-creation or file-write entry in the same or later archive could traverse that symlink to reach host paths the build user could write to. This issue has been patched in version 1.2.5.

PraisonAI is a multi-agent teams system. Prior to version 4.6.37, the _safe_extractall helper that all recipe pull, recipe publish, and recipe unpack flows route through validates each archive member's name for absolute paths, .. segments, and resolved-path escape — but does not validate member.linkname, does not reject symlink/hardlink members, and calls tar.extractall(dest_dir) without filter="data". A bundle that contains a symlink with a name inside dest_dir but a linkname pointing outside it, followed by a regular file whose path traverses through the just-created symlink, escapes dest_dir and lets the attacker write arbitrary content to an attacker-chosen location on the victim's filesystem. This issue has been patched in version 4.6.37.

In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web server

Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write

Improper link resolution before file access ('link following') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2.

CVE-2026-40977 is a medium severity vulnerability in Spring Boot affecting versions 2.7.0 through 4.0.5. It involves improper link resolution before file access in the ApplicationPidFileWriter component. A local attacker with write access to the PID file location can corrupt one file on the host each time the application starts. The vulnerability impacts the integrity of the host system but does not affect confidentiality or availability. Fixed versions include 2.7.

CVE-2026-41433 is a path traversal vulnerability in open-telemetry's opentelemetry-ebpf-instrumentation versions 0.4.0 up to but not including 0.8.0. It allows a local attacker controlling a Java workload to overwrite arbitrary host files when Java injection is enabled and the instrumentation runs with elevated privileges. The flaw arises because the injector trusts the TMPDIR environment variable from the target process and uses unsafe file creation methods, enabling filesystem boundary escape and symlink-based file overwriting. This vulnerability is fixed in version 0.8.0.

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive containing a symlinked notes.txt file. Attackers can craft a .zrp archive with a symlinked notes.txt that bypasses directory confinement checks, allowing note operations to follow the symlink and access arbitrary files outside the dir.projects root directory.

CVE-2026-33694 is a high-severity vulnerability in Tenable Nessus and Nessus Agent involving improper link resolution before file access (CWE-59). It allows an attacker to create a junction that can lead to deletion of arbitrary files with SYSTEM privileges. This flaw potentially enables arbitrary code execution with elevated SYSTEM privileges. No official patch or remediation guidance is currently provided by the vendor. Exploits in the wild are not known at this time.

The mv utility in uutils coreutils improperly handles symbolic links when moving directory trees across filesystem boundaries by expanding symlinks instead of preserving them. This behavior can cause resource exhaustion, unexpected duplication of sensitive data, or infinite recursion due to symlink loops. The vulnerability is tracked as CVE-2026-35365 with a medium severity rating and a CVSS score of 6.6. No patch or official remediation has been confirmed yet.

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent. The utility checks if a source path is a symbolic link using path-based metadata but subsequently opens it without the O_NOFOLLOW flag. An attacker with concurrent write access can swap a regular file for a symbolic link during this window, causing a privileged cp process to copy the contents of arbitrary sensitive files into a destination controlled by the attacker.

CVE-2026-35349 is a vulnerability in the rm utility of uutils coreutils that allows bypassing the --preserve-root protection. The vulnerability arises because the utility uses a path-string check instead of verifying device and inode numbers to identify the root directory. This flaw enables an attacker or accidental user to bypass safeguards by using a symbolic link that resolves to the root directory, potentially causing recursive deletion of the entire root filesystem.

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the contents of the link's target. In environments where a privileged user (e.g., root) monitors a log directory, a local attacker with write access to that directory can replace a log file with a symlink to a sensitive system file (such as /etc/shadow), causing tail to disclose the contents of the sensitive file.

CVE-2026-40931 is a high-severity vulnerability in the node-modules compressing library affecting versions prior to 2.1.1 and 1.10.5. It involves improper link resolution before file access, where a logical path validation check fails to consider the actual filesystem state, allowing attackers to bypass security checks via directory poisoning using pre-existing symbolic links. This can lead to unauthorized file access and potential compromise of confidentiality, integrity, and availability. The vulnerability has been fixed in versions 2.1.1 and 1.

python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, `set_key()` and `unset_key()` in python-dotenv follow symbolic links when rewriting `.env` files, allowing a local attacker to overwrite arbitrary files via a crafted symlink when a cross-device rename fallback is triggered. Users should upgrade to v.1.2.2 or, as a workaround, apply the patch manually.

Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't verify downloaded files, potentially following symlinks outside the repository. This issue has been fixed in version 5.17.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.