Skip to content
Noroxi

CWE-61 · 139 records

UNIX Symbolic Link (Symlink) Following

CVEs in this class

139 records

  • CVE-2026-54420
    64This week

    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP

    HighCVSS 8.5KEVWeaponizedEPSS 1%

    litespeedtech · litespeed cpanel pluginJun 14, 2026

  • CVE-2024-54661
    39Monitor

    readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

    CriticalCVSS 9.8No exploitEPSS 1%

    dest-unreach · socatDec 4, 2024

  • CVE-2025-23394
    39Monitor

    daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

    CriticalCVSS 9.8No exploitEPSS 1%

    suse · opensuse tumbleweedMay 26, 2025

  • CVE-2026-55447
    38Monitor

    Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

    CriticalCVSS 9.6No exploitEPSS 1%

    langflow · langflowJun 23, 2026

  • CVE-2025-68937
    38Monitor

    Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-

    CriticalCVSS 9.5Proof of conceptEPSS 1%

    forgejo · forgejoDec 25, 2025

  • CVE-2026-34078
    37Monitor

    Flatpak has a complete sandbox escape leading to host file access and code execution in the host context

    CriticalCVSS 9.3No exploitEPSS 1%

    flatpak · flatpakApr 7, 2026

  • CVE-2025-55345
    35Monitor

    Unsafe symlink following in restricted workspace-write sandbox leads to RCE

    HighCVSS 8.8No exploitEPSS 1%

    Aug 13, 2025

  • CVE-2024-22014
    35Monitor

    An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbol

    HighCVSS 8.8No exploitEPSS 1%

    360totalsecurity · 360 total securityApr 15, 2024

  • CVE-2026-27976
    35Monitor

    Zed Extension Sandbox Escape via Tar Symlink Following

    HighCVSS 8.8No exploitEPSS 1%

    zed · zedFeb 25, 2026

  • CVE-2024-52535
    35Monitor

    Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symboli

    HighCVSS 8.8No exploitEPSS 1%

    dell · supportassist for business pcsDec 25, 2024

  • CVE-2024-45418
    35Monitor

    Zoom Apps for macOS - Symbolic Link Following

    HighCVSS 8.8No exploitEPSS 0%

    zoom · meeting software development kitFeb 25, 2025

  • CVE-2026-6475
    35Monitor

    PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

    HighCVSS 8.8No exploitEPSS 0%

    postgresql · postgresqlMay 14, 2026

  • CVE-2026-56748
    34Monitor

    Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

    HighCVSS 8.7No exploitEPSS 1%

    cribl · cribl streamJul 27, 2026

  • CVE-2026-41937
    34Monitor

    Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload

    HighCVSS 8.6No exploitEPSS 1%

    givanz · vvvebMay 14, 2026

  • CVE-2025-57802
    34Monitor

    Airlink's Daemon Symlink Vulnerability

    HighCVSS 8.7No exploitEPSS 0%

    airlinklabs · daemonAug 25, 2025

  • CVE-2026-12958
    34Monitor

    Arbitrary file write in Language Servers for AWS

    HighCVSS 8.5No exploitEPSS 0%

    amazon web services · language servers for awsJun 23, 2026

  • CVE-2025-46810
    34Monitor

    A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate

    HighCVSS 8.5No exploitEPSS 0%

    opensuse · tumbleweedSep 2, 2025

  • CVE-2026-49248
    33Monitor

    OneDev: RCE through absolute-path symlink following allows low-privileged users to overwrite arbitrary server via TarUtils.untar

    HighCVSS 8.3No exploitEPSS 1%

    theonedev · onedevJun 18, 2026

  • CVE-2025-52565
    33Monitor

    container escape due to /dev/console mount and related races

    HighCVSS 8.4No exploitEPSS 1%

    linuxfoundation · runcNov 6, 2025

  • CVE-2025-33225
    33Monitor

    NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names.

    HighCVSS 8.4No exploitEPSS 0%

    nvidia · nvidia resiliency extensionDec 16, 2025

  • CVE-2026-53802
    33Monitor

    rsync < 3.5.0 Arbitrary File Read via Symlink Following

    HighCVSS 8.4No exploitEPSS 0%

    samba · rsyncAug 13, 2026

  • CVE-2026-39860
    33Monitor

    Nix sandbox escape: file write via symlink at FOD `.tmp` copy destination

    HighCVSS 8.4No exploitEPSS 0%

    linux · linux kernelApr 8, 2026

  • CVE-2024-47515
    32Monitor

    Pagure: generate_archive() follows symbolic links in temporary clones

    HighCVSS 8.1No exploitEPSS 1%

    Dec 24, 2024

  • CVE-2026-35525
    32Monitor

    LiquidJS has a root restriction bypass for partial and layout loading through symlinked templates

    HighCVSS 8.2No exploitEPSS 1%

    liquidjs · liquidjsApr 8, 2026

  • CVE-2025-10854
    32Monitor

    Symlink Following in txtai leads to arbitrary file write when loading untrusted embedding indices

    HighCVSS 8.1No exploitEPSS 0%

    Sep 22, 2025

All vulnerability classes