CVE-2026-102118 | High | 7.8 | 2026-09-30 | A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalat… |
CVE-2026-102113 | High | 7.8 | 2026-09-30 | A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on… |
CVE-2026-10739 | | | 2026-09-30 | Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-sup… |
CVE-2026-81310 | Medium | 6.6 | 2026-09-30 | Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwri… |
CVE-2026-79534 | Medium | 5.9 | 2026-09-29 | mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystemserver/handler/helpe… |
CVE-2026-12345 | | | 2026-09-29 | The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a… |
CVE-2026-102242 | | | 2026-09-29 | Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a r… |
CVE-2026-92371 | High | 7.0 | 2026-09-29 | TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functiona… |
CVE-2026-101894 | Critical | 9.1 | 2026-09-28 | The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API relies on lexical containment check… |
CVE-2026-87799 | Critical | 9.9 | 2026-09-28 | Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an au… |
CVE-2026-87798 | Medium | 5.8 | 2026-09-28 | Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and 5.21.8… |
CVE-2026-96284 | Low | 2.5 | 2026-09-27 | A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the… |
CVE-2026-96282 | Low | 3.1 | 2026-09-27 | A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can b… |
CVE-2026-96279 | Medium | 6.5 | 2026-09-27 | A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remo… |
CVE-2026-100838 | High | 8.1 | 2026-09-27 | Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw… |
CVE-2026-100716 | Critical | 9.9 | 2026-09-26 | Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export (DataDump) cron fails to validate intermediate path componen… |
CVE-2026-100715 | Critical | 9.6 | 2026-09-26 | Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 (deleteFtpData), queued w… |
CVE-2026-100692 | High | 7.5 | 2026-09-26 | Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopped at the mount root itself, so a theme… |
CVE-2026-100690 | High | 7.5 | 2026-09-26 | Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js.Babel) under the Node.js permission model to restrict file sys… |
CVE-2026-100419 | High | 7.0 | 2026-09-25 | gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree d… |
CVE-2026-80430 | | | 2026-09-25 | Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program w… |
CVE-2026-93353 | Low | 3.1 | 2026-09-24 | copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitra… |
CVE-2026-82331 | Critical | 9.8 | 2026-09-23 | Improper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apache BuildStream running on Python < 3.12 allows m… |
CVE-2026-55074 | | | 2026-09-21 | Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec connection plugin's put… |
CVE-2026-92253 | | | 2026-09-20 | Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attack… |
CVE-2026-15815 | High | 8.8 | 2026-09-17 | Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when
extracting plugin archives. A crafted plugin archive can chain relative symbolic… |
CVE-2026-54587 | | | 2026-09-17 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSET_DIR or ASSET_DIR_OWNER_MODE in libmport/bundle_read_install_pkg.c u… |
CVE-2026-54576 | | | 2026-09-17 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, do_actual_install() in libmport/bundle_read_install_pkg.c used path-based lstat(), chown(), stat(), a… |
CVE-2026-86861 | Medium | 5.9 | 2026-09-17 | pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested path with Filemanager.check_access_permiss… |
CVE-2026-85731 | High | 8.8 | 2026-09-16 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, content/file.Store extraction of OCI layers marked with io.deis.oras.content.unpack=true ca… |
CVE-2026-71182 | Low | 3.0 | 2026-09-16 | Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high pri… |
CVE-2026-71181 | Low | 3.0 | 2026-09-16 | Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high pri… |
CVE-2026-59944 | Medium | 6.1 | 2026-09-16 | Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the… |
CVE-2026-68491 | | | 2026-09-15 | An insufficient check allowed for the overwrite of arbitrary files via a symlink. |
CVE-2026-79699 | Medium | 4.4 | 2026-09-15 | A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction de… |
CVE-2026-55828 | | | 2026-09-15 | qbee transport is a remote access transport protocol implementation. Prior to 1.26.25, the extractTar routine uses strictly lexical path validation that does n… |
CVE-2026-77179 | | | 2026-09-15 | On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest… |
CVE-2026-84584 | High | 8.4 | 2026-09-14 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox. |
CVE-2026-89021 | Medium | 6.9 | 2026-09-14 | MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files… |
CVE-2026-82049 | | | 2026-09-14 | In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link… |
CVE-2026-90807 | Medium | 6.3 | 2026-09-14 | A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFiles of the file src/modules/agent-to-agent/agent-… |
CVE-2026-90930 | Medium | 6.8 | 2026-09-14 | File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links without reapplying rules to the target, allowing auth… |
CVE-2026-87910 | | | 2026-09-11 | When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function i… |
CVE-2026-89258 | Medium | 6.3 | 2026-09-11 | Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directories were not dropped during direct resource lookups… |
CVE-2026-88016 | High | 7.1 | 2026-09-10 | rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --l… |
CVE-2026-88265 | Medium | 5.6 | 2026-09-10 | A flaw was found in crun. After pivot_root, reopening /dev/null for stdio can follow a symlink and attach a host file to container stdio, then change that file… |
CVE-2026-88264 | Medium | 5.6 | 2026-09-10 | A flaw was found in crun. When the container configuration does not give /dev a dedicated mount, terminal setup can redirect /dev/console onto an attacker-cont… |
CVE-2026-87766 | High | 8.8 | 2026-09-09 | A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot… |
CVE-2026-78622 | Medium | 6.0 | 2026-09-08 | The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated pri… |
CVE-2026-83999 | High | 7.0 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to e… |
CVE-2026-81963 | High | 7.8 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. |
CVE-2026-70563 | High | 8.1 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
CVE-2026-69771 | Medium | 4.7 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Container Manager Service allows an authorized attacker to bypass a security feature… |
CVE-2026-69425 | Medium | 4.7 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally. |
CVE-2026-69379 | High | 7.0 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69289 | High | 7.8 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
CVE-2026-68830 | Medium | 5.5 | 2026-09-08 | Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to disclose… |
CVE-2026-67368 | High | 8.8 | 2026-09-08 | Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to elevate privileges over a network. |
CVE-2026-86469 | Medium | 5.3 | 2026-09-07 | A flaw was found in GLib2. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION and creating the .goutputstream-XXXXXX temporary file fails, th… |
CVE-2026-86424 | Low | 2.5 | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder that allows attackers to bypass path… |
CVE-2026-86422 | Low | 3.3 | 2026-09-07 | ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or wr… |
CVE-2026-85583 | Medium | 6.5 | 2026-09-04 | SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized… |
CVE-2026-85092 | Medium | 6.6 | 2026-09-03 | LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the operator-supplied path parameter, allowing… |
CVE-2026-78409 | High | 7.0 | 2026-09-02 | The X-mount.subdir option uses a detached-tree fast path on Linux 6.15 and later and passes the configured subdirectory to open_tree() with AT_SYMLINK_NOFOLLOW… |
CVE-2024-14047 | High | 7.2 | 2026-09-01 | A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged att… |
CVE-2026-19820 | | | 2026-09-01 | A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system fil… |
CVE-2026-55569 | Medium | 6.6 | 2026-08-28 | aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink… |
CVE-2026-55108 | High | 8.5 | 2026-08-28 | KubeVela is an open source application delivery platform. Prior to 1.9.14, from 1.10.0-alpha.1 until 1.10.9, and from 1.11.0-alpha.1 until 1.11.0-alpha.4, the… |
CVE-2026-82252 | High | 7.5 | 2026-08-28 | gitoxide before 0.52.1 follows symlinks when reading the worktree .gitmodules file, allowing attackers to inject out-of-repository bytes into submodule metadat… |
CVE-2026-82248 | Medium | 5.3 | 2026-08-28 | gix-worktree-state before 0.33.0 (part of gitoxide) allows writing files outside the worktree on Windows. gix_worktree_state::checkout() follows an existing te… |
CVE-2026-59311 | Medium | 6.8 | 2026-08-27 | A local unprivileged user on the same host can redirect all Zip/UnZip transformer output into a directory of their choosing by pre-creating /tmp/ziptransformer… |
CVE-2026-81727 | High | 7.1 | 2026-08-27 | NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows a… |
CVE-2026-81690 | High | 7.3 | 2026-08-27 | openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with… |
CVE-2026-56651 | | | 2026-08-27 | Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" f… |
CVE-2026-81572 | High | 7.8 | 2026-08-27 | In CodeMeter Runtime from version 8.40 to (excluding) 8.41a and 9.00 to (excluding) 9.10, cmu.exe --create-io --file C: creates a predictable temporary file un… |
CVE-2026-65647 | | | 2026-08-26 | Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root. |
CVE-2026-61792 | High | 7.7 | 2026-08-26 | Weblate is a web-based continuous localization platform used to manage software translations. In versions prior to 2026.7, a project administrator can read fil… |
CVE-2026-66153 | High | 7.0 | 2026-08-25 | The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths. |
CVE-2026-79655 | High | 7.8 | 2026-08-25 | A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creation or overwrite. By… |
CVE-2026-72696 | High | 8.4 | 2026-08-25 | Grav CMS before 2.0.16 contains a symlink following vulnerability in Scheduler Job::createLockFile() that allows local attackers to overwrite arbitrary files b… |
CVE-2026-76845 | Medium | 6.5 | 2026-08-24 | adm-zip 0.5.9 through 0.6.0 follows symbolic links at the extraction destination. Utils.sanitize in util/utils.js enforces containment by comparing only the st… |
CVE-2026-70626 | Medium | 6.2 | 2026-08-22 | NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus… |
CVE-2026-55168 | Medium | 6.5 | 2026-08-21 | Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them… |
CVE-2026-71493 | | | 2026-08-21 | Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, the readFile, pathExists, isDir, and matchPaths templa… |
CVE-2026-49114 | High | 7.1 | 2026-08-21 | In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writ… |
CVE-2026-77815 | High | 7.5 | 2026-08-21 | to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A sym… |
CVE-2026-63125 | Critical | 9.9 | 2026-08-21 | Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity wi… |
CVE-2026-17171 | High | 7.8 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links. |
CVE-2026-16989 | High | 7.1 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links. |
CVE-2026-16980 | Medium | 6.3 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links. |
CVE-2026-18267 | Medium | 6.8 | 2026-08-20 | Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code… |
CVE-2026-55086 | Medium | 4.2 | 2026-08-19 | Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filename… |
CVE-2026-56796 | Medium | 6.6 | 2026-08-19 | Dell Command Update (DCU), versions prior to 5.7.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged a… |
CVE-2026-47187 | Critical | 9.3 | 2026-08-19 | SSHFS is a network filesystem client for connecting to SSH servers. Prior to version 3.7.6, a rogue SFTP server can return absolute symlink targets or relative… |
CVE-2026-47699 | Medium | 6.4 | 2026-08-18 | Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI imag… |
CVE-2026-76037 | High | 8.4 | 2026-08-18 | Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outs… |
CVE-2026-17106 | | | 2026-08-18 | The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations… |
CVE-2026-19693 | High | 8.1 | 2026-08-17 | extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive cont… |
CVE-2026-74796 | Medium | 6.1 | 2026-08-16 | OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attackers can place a malicious symlink in a… |
CVE-2026-19909 | High | 7.5 | 2026-08-14 | PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra… |