A symbolic link (symlink) following vulnerability exists in openEuler iSulad on Linux up to version 2.1.6. An attacker who can cause the victim or platform to run a crafted malicious image may exploit this flaw to have the iSulad daemon copy sensitive host directories into an anonymous volume during container creation, allowing the container to read sensitive host data.