CWE-59 · Improper Link Resolution Before File Access (page 3)
Page 3 of 17 — CVEs classified under CWE-59, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-41433 | High | 8.4 | 2026-04-24 | OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java agent inje… |
CVE-2026-6941 | Medium | 6.6 | 2026-04-23 | radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configure… |
CVE-2026-33694 | | 2026-04-23 | This vulnerability allows an attacker to create a junction, enabling the deletion of arbitrary files with SYSTEM privileges. As a result, this condition potent… | |
CVE-2026-41231 | High | 7.5 | 2026-04-23 | Froxlor is open source server administration software. Prior to version 2.3.6, `DataDump.add()` constructs the export destination path from user-supplied input… |
CVE-2026-35365 | Medium | 6.6 | 2026-04-22 | The mv utility in uutils coreutils improperly handles directory trees containing symbolic links during moves across filesystem boundaries. Instead of preservin… |
CVE-2026-35359 | Medium | 4.7 | 2026-04-22 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent. The utility che… |
CVE-2026-35349 | Medium | 6.7 | 2026-04-22 | A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection. The implementation uses a path-string check rather tha… |
CVE-2026-35345 | Medium | 5.3 | 2026-04-22 | A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU… |
CVE-2026-40931 | High | 8.4 | 2026-04-21 | Compressing is a compressing and uncompressing lib for node. Prior to 2.1.1 and 1.10.5, the patch for CVE-2026-24884 relies on a purely logical string validati… |
CVE-2026-28684 | Medium | 6.6 | 2026-04-20 | python-dotenv reads key-value pairs from a .env file and can set them as environment variables. Prior to version 1.2.2, `set_key()` and `unset_key()` in python… |
CVE-2026-34242 | High | 7.7 | 2026-04-15 | Weblate is a web based localization tool. In versions prior to 5.17, the ZIP download feature didn't verify downloaded files, potentially following symlinks o… |
CVE-2026-20161 | Medium | 5.5 | 2026-04-15 | A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files… |
CVE-2026-4135 | Medium | 6.6 | 2026-04-15 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authentic… |
CVE-2026-0827 | High | 7.1 | 2026-04-15 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, d… |
CVE-2026-32212 | Medium | 5.5 | 2026-04-14 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information loca… |
CVE-2026-35400 | Low | 3.5 | 2026-04-08 | LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research… |
CVE-2026-32282 | Medium | 6.4 | 2026-04-08 | On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even… |
CVE-2026-34078 | Critical | 10.0 | 2026-04-07 | Flatpak is a Linux application sandboxing and distribution framework. Prior to 1.16.4, the Flatpak portal accepts paths in the sandbox-expose options which can… |
CVE-2026-27456 | Medium | 4.7 | 2026-04-03 | util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified in the SU… |
CVE-2025-43257 | High | 8.7 | 2026-04-02 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.6. An app may be able to break out of its sandbox. |
CVE-2026-34604 | High | 7.1 | 2026-04-01 | Tina is a headless content management system. Prior to version 2.2.2, @tinacms/graphql uses string-based path containment checks in FilesystemBridge. That bloc… |
CVE-2026-34603 | High | 7.1 | 2026-04-01 | Tina is a headless content management system. Prior to version 2.2.2, @tinacms/cli recently added lexical path-traversal checks to the dev media routes, but th… |
CVE-2026-34452 | Medium | 5.3 | 2026-03-31 | The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem… |
CVE-2026-33748 | High | 7.5 | 2026-03-27 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to version 0.28.1, insufficient va… |
CVE-2026-28866 | Medium | 6.2 | 2026-03-25 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15… |
CVE-2026-20694 | Medium | 5.5 | 2026-03-25 | This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.7.4, macOS Sequoia 15.7.5, macOS… |
CVE-2026-20633 | Medium | 5.5 | 2026-03-25 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be… |
CVE-2026-32054 | Medium | 6.5 | 2026-03-21 | OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in browser trace and download output path handling that allows local attackers t… |
CVE-2026-32024 | Medium | 5.5 | 2026-03-19 | OpenClaw versions prior to 2026.2.22 contain a symlink traversal vulnerability in avatar handling that allows attackers to read arbitrary files outside the con… |
CVE-2026-32020 | Low | 3.3 | 2026-03-19 | OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symbolic links, allowing out-of-root file r… |
CVE-2026-32013 | High | 8.8 | 2026-03-19 | OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents.files.set methods that allows reading and wri… |
CVE-2026-31990 | Medium | 6.1 | 2026-03-19 | OpenClaw versions prior to 2026.3.2 contain a vulnerability in the stageSandboxMedia function in which it fails to validate destination symlinks during media s… |
CVE-2026-33001 | High | 8.8 | 2026-03-18 | Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted a… |
CVE-2026-22180 | Medium | 5.3 | 2026-03-18 | OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directo… |
CVE-2026-2808 | Medium | 6.8 | 2026-03-12 | HashiCorp Consul and Consul Enterprise 1.18.20 up to 1.21.10 and 1.22.4 are vulnerable to arbitrary file read when configured with Kubernetes authentication. T… |
CVE-2026-31979 | High | 8.8 | 2026-03-11 | Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, write… |
CVE-2026-31894 | High | 7.5 | 2026-03-11 | WeGIA is a web manager for charitable institutions. In 3.6.5, The patched loadBackupDB() extracts tar.gz archives to a temporary directory using PHP's PharData… |
CVE-2026-25187 | High | 7.8 | 2026-03-10 | Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally. |
CVE-2026-28689 | Medium | 6.3 | 2026-03-10 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authoriz… |
CVE-2026-29786 | Medium | 6.3 | 2026-03-07 | node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory… |
CVE-2026-27748 | High | 7.8 | 2026-03-05 | Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service r… |
CVE-2026-27905 | High | 7.8 | 2026-03-03 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.36, the safe_extract_tarfile() function… |
CVE-2026-25906 | High | 7.3 | 2026-03-03 | Dell Optimizer, versions prior to 6.3.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker wit… |
CVE-2025-66680 | High | 7.1 | 2026-03-03 | An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted reques… |
CVE-2025-48582 | High | 8.4 | 2026-03-02 | In multiple locations, there is a possible way to delete media without the MANAGE_EXTERNAL_STORAGE permission due to an intent redirect. This could lead to loc… |
CVE-2026-27967 | High | 7.1 | 2026-02-26 | Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (`read_file`, `edit_file`). It allows reading and writi… |
CVE-2025-63946 | High | 7.4 | 2026-02-23 | A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with e… |
CVE-2025-63945 | High | 7.4 | 2026-02-23 | A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with eleva… |
CVE-2026-2490 | Medium | 5.5 | 2026-02-20 | RustDesk Client for Windows Transfer File Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive… |
CVE-2026-2627 | High | 7.8 | 2026-02-17 | A security flaw has been discovered in Softland FBackup up to 9.9. This impacts an unknown function in the library C:\Program Files\Common Files\microsoft shar… |
CVE-2026-26225 | | 2026-02-12 | Intego Personal Backup, a macOS backup utility that allows users to create scheduled backups and bootable system clones, contains a local privilege escalation… | |
CVE-2026-20610 | High | 7.8 | 2026-02-11 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.3. An app may be able to gain root privileges. |
CVE-2025-66277 | Critical | 9.8 | 2026-02-11 | A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to t… |
CVE-2026-21517 | Medium | 4.7 | 2026-02-10 | Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally. |
CVE-2025-62676 | High | 7.1 | 2026-02-10 | An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, Fort… |
CVE-2025-15314 | Medium | 5.5 | 2026-02-10 | Tanium addressed an arbitrary file deletion vulnerability in end-user-cx. |
CVE-2025-15313 | Medium | 5.5 | 2026-02-10 | Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS. |
CVE-2025-15310 | High | 7.8 | 2026-02-10 | Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. |
CVE-2025-15319 | High | 7.8 | 2026-02-09 | Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. |
CVE-2025-15318 | Medium | 5.5 | 2026-02-09 | Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools. |
CVE-2026-21419 | Medium | 6.6 | 2026-02-09 | Dell Display and Peripheral Manager (Windows) versions prior to 2.2 contain an Improper Link Resolution Before File Access ('Link Following') vulnerability in… |
CVE-2025-15328 | Medium | 5.0 | 2026-02-05 | Tanium addressed an improper link resolution before file access vulnerability in Enforce. |
CVE-2025-15324 | Medium | 6.6 | 2026-02-05 | Tanium addressed a documentation issue in Engage. |
CVE-2026-24884 | High | 8.4 | 2026-02-04 | Compressing is a compressing and uncompressing lib for node. In version 2.0.0 and 1.10.3 and prior, Compressing extracts TAR archives while restoring symbolic… |
CVE-2025-69431 | Medium | 6.1 | 2026-02-03 | The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to i… |
CVE-2025-69430 | Medium | 6.1 | 2026-02-03 | An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 (version equal to or prior to V1.9.12), DM3 (version equal… |
CVE-2025-69429 | Medium | 6.1 | 2026-02-03 | The ORICO NAS CD3510 (version V1.9.12 and below) contains an Incorrect Symlink Follow vulnerability that could be exploited by attackers to leak or tamper with… |
CVE-2025-15543 | Medium | 4.6 | 2026-01-29 | Improper link resolution in USB HTTP access path in VX800v v1.0 allows a crafted USB device to expose root filesystem contents, giving an attacker with physica… |
CVE-2025-15541 | Medium | 6.3 | 2026-01-29 | Improper link resolution in the VX800v v1.0 SFTP service allows authenticated adjacent attackers to use crafted symbolic links to access system files, resultin… |
CVE-2026-23563 | Medium | 5.7 | 2026-01-29 | Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1… |
CVE-2026-24842 | High | 8.2 | 2026-01-28 | node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution se… |
CVE-2026-24056 | Medium | 6.5 | 2026-01-26 | pnpm is a package manager. Prior to version 10.28.2, when pnpm installs a `file:` (directory) or `git:` dependency, it follows symlinks and reads their target… |
CVE-2025-67124 | Medium | 6.8 | 2026-01-23 | A TOCTOU and symlink race in svenstaro/miniserve 0.32.0 upload finalization (when uploads are enabled) can allow an attacker to overwrite arbitrary files outsi… |
CVE-2026-23893 | Medium | 6.8 | 2026-01-22 | openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileg… |
CVE-2026-24047 | Medium | 6.3 | 2026-01-21 | Backstage is an open framework for building developer portals, and @backstage/cli-common provides config loading functionality used by the backend and command… |
CVE-2026-24046 | High | 7.1 | 2026-01-21 | Backstage is an open framework for building developer portals. Multiple Scaffolder actions and archive extraction utilities were vulnerable to symlink-based pa… |
CVE-2025-13154 | Medium | 5.5 | 2026-01-14 | An improper link following vulnerability was reported in the SmartPerformanceAddin for Lenovo Vantage that could allow an authenticated local user to perform a… |
CVE-2026-20941 | High | 7.8 | 2026-01-13 | Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. |
CVE-2026-22702 | Medium | 4.5 | 2026-01-10 | virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU (Time-of-Check-Time-of-Use) vulnerabilities in virtual… |
CVE-2026-22701 | Medium | 5.3 | 2026-01-10 | filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementati… |
CVE-2025-53594 | | 2026-01-02 | A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulner… | |
CVE-2025-12838 | High | 7.3 | 2025-12-23 | MSP360 Free Backup Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected instal… |
CVE-2023-53973 | High | 8.4 | 2025-12-22 | Zillya Total Security 3.0.2367.0 contains a privilege escalation vulnerability that allows low-privileged users to copy files to unauthorized system locations… |
CVE-2025-68279 | High | 7.7 | 2025-12-18 | Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbol… |
CVE-2025-68146 | Medium | 6.3 | 2025-12-16 | filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTOU) race condition allows local attacker… |
CVE-2025-14693 | Medium | 6.2 | 2025-12-15 | A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Handler. Such manipulation leads to symlink… |
CVE-2025-43461 | Medium | 5.5 | 2025-12-12 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Tahoe 26.1. An app may be able to access protected user data. |
CVE-2025-43381 | Medium | 5.5 | 2025-12-12 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app may be able to delete protected user data. |
CVE-2025-7073 | High | 7.8 | 2025-12-10 | A local privilege escalation vulnerability in Bitdefender Total Security versions prior to 27.0.47.241 allows low-privileged attackers to elevate privileges. T… |
CVE-2025-66626 | High | 8.1 | 2025-12-09 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions 3.6.13 and below and versions 3.7.0 t… |
CVE-2025-46637 | High | 7.3 | 2025-12-09 | Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A local malicious user cou… |
CVE-2025-46636 | Medium | 6.6 | 2025-12-09 | Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker… |
CVE-2025-67487 | High | 8.6 | 2025-12-09 | Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. Versions 2.40.0 and below contain symbolic links (symlinks) w… |
CVE-2025-65843 | High | 7.7 | 2025-12-03 | Aquarius Desktop 3.0.069 for macOS contains an insecure file handling vulnerability in its support data archive generation feature. The application follows sym… |
CVE-2025-34352 | | 2025-12-02 | JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM duri… | |
CVE-2025-60710 | High | 7.8 | 2025-11-11 | Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. |
CVE-2025-59510 | Medium | 5.5 | 2025-11-11 | Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny servic… |
CVE-2025-24918 | Medium | 6.7 | 2025-11-11 | Improper link resolution before file access ('link following') for some Intel(R) Server Configuration Utility software and Intel(R) Server Firmware Update Util… |
CVE-2025-5718 | Medium | 6.8 | 2025-11-11 | The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is config… |
CVE-2025-11578 | High | 7.2 | 2025-11-10 | A privilege escalation vulnerability was identified in GitHub Enterprise Server that allowed an authenticated Enterprise admin to gain root SSH access to the a… |