cve.bz

CWE-59: Improper Link Resolution Before File Access (Link Following), page 2

Filter

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

What the weakness is: CWE-59 at MITRE

Ask an AI about CWE-59

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-59: Improper Link Resolution Before File Access and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/59.html and https://cve.bz/cve/cwe/59?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.7CVE-2026-53882EPSS 0.4%

    An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the securi…

  2. 6.9CVE-2026-110860EPSS 0.2%

    GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not reject symbolic links in intermediate path components. An untrusted repository can commit a …

  3. 6.8CVE-2026-104109EPSS 0.4%

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise validates archive entry names but extracts them directly into the authorized live destination before validati…

  4. 4.8CVE-2026-55498EPSS 0.3%

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder links with subfolder browsing enabled can follow a symbolic link inside the shared folde…

  5. 8.7CVE-2026-110767EPSS 0.4%

    Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a p…

  6. 8.1CVE-2026-104103EPSS 0.5%

    Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.datasets.archives.extract_archive() validated tar member names before calling TarFile.extractall() but did not validate …

  7. 6.5CVE-2026-103975EPSS 0.6%

    Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support ZIP extraction accepts an archive entry that creates a symbolic link to a location outside t…

  8. 7.8CVE-2026-90954EPSS 0.2%

    A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers which flush once after the last member. A specially crafted .de…

  9. 5.5CVE-2026-97790EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.

  10. 7.8CVE-2026-96911EPSS 0.5%

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2026-96243EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2026-96231EPSS 0.4%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2026-96225EPSS 0.4%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2026-88191EPSS 0.4%

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  15. 7.8CVE-2026-88133EPSS 0.5%

    Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2026-88072EPSS 0.4%

    Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

  17. 7.8CVE-2026-85849EPSS 0.5%

    Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

  18. 7.8CVE-2026-85343EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

  19. 5.5CVE-2026-83933EPSS 0.5%

    Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

  20. 7.8CVE-2026-83927EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.

  21. 7.0CVE-2026-83793EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-83704EPSS 0.5%

    Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  23. 7.8CVE-2026-83659EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

  24. 5.5CVE-2026-83507EPSS 0.5%

    Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

  25. 5.5CVE-2026-70264EPSS 0.5%

    Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.

  26. 7.3CVE-2026-70190EPSS 0.5%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  27. 6.7CVE-2026-70165EPSS 0.4%

    Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

  28. 4.7CVE-2026-69969EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

  29. 7.8CVE-2026-69673EPSS 0.5%

    Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.

  30. 5.5CVE-2026-62687EPSS 0.5%

    Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.

  31. 7.0CVE-2026-108135EPSS 0.3%

    Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

  32. 7.8CVE-2026-102204EPSS 0.4%

    Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2026-102202EPSS 0.4%

    Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

  34. 8.5CVE-2026-53562EPSS 0.2%

    Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.

  35. 4.7CVE-2026-77361EPSS 0.1%

    obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault s…

  36. 8.4CVE-2026-109965EPSS 0.2%

    Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Project.is_path_in_project() normalizes paths lexically witho…

  37. 6.7CVE-2026-109596EPSS 0.1%

    Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancestor directories. Attackers controlling a theme can place a sy…

  38. 4.9CVE-2026-109375EPSS 0.3%

    Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs. Attackers controlling sandbox code…

  39. 2.0CVE-2026-109274EPSS 0.1%

    ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during sc…

  40. 2.0CVE-2026-105081EPSS 0.1%

    ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create…

  41. 2.3CVE-2026-108839EPSS 0.3%

    thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside the workspace by following symlinks. Attackers who plant a symlink under the allow…

  42. 7.6CVE-2026-108759EPSS 0.3%

    mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via symlinks. Attackers or prompt-injected agents can name symli…

  43. 4.8CVE-2026-108751EPSS 0.2%

    MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite files outside the project via a symlinked .moai-tmp staging path. Attackers can co…

  44. 2.0CVE-2026-108723EPSS 0.1%

    answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text without resolving symlinks. Attackers can ship a repository with a symlink pointing …

  45. 5.7CVE-2026-108600EPSS 0.2%

    open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to create files outside the workspace root by using dangling symlinks. Attackers ca…

  46. 5.7CVE-2026-108599EPSS 0.2%

    phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspace_only_writes by exploiting lexical-only path checks in the permission gate. Attackers can commit symlinks poi…

  47. 6.3CVE-2026-108119EPSS 0.1%

    A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the def…

  48. 8.1CVE-2026-107810EPSS 0.4%

    Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts inner archives before applying the restore_nginx and restore_nginx_ui flags and permits symlinks targeting the live Ngin…

  49. 8.8CVE-2026-89091EPSS 0.5%

    A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalisation (os.path.abspath) instead of resolving symbolic links (o…

  50. 7.3CVE-2026-107716EPSS 0.1%

    Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovered and existing .jinja prompt files. In an application where un…