cve.bz

CWE-62: UNIX Hard Link

Filter

The product, when opening a file or directory, does not sufficiently account for when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.

What the weakness is: CWE-62 at MITRE. All weaknesses

Ask an AI about CWE-62

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-62: UNIX Hard Link and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/62.html and https://cve.bz/cve/cwe/62?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.7CVE-2026-109518EPSS 0.9%

    On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the…

  2. 6.1CVE-2026-112934EPSS 0.2%

    filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another local user with rename access to the lock directory to replace a record with a named pipe…

  3. 8.8CVE-2026-32232EPSS 0.7%

    ZeptoClaw is a personal AI assistant. Prior to 0.7.6, there is a Dangling Symlink Component Bypass, TOCTOU Between Validation and Use, and Hardlink Alias Bypass. This vulnerability is fixed in 0.7.6.

  4. 7.8CVE-2024-54189EPSS 0.3%

    A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken, a root service writes to a file owned by a normal user. By …

  5. 7.8CVE-2024-36486EPSS 0.3%

    A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual machine is restored, the prl_vmarchiver tool decompresses th…