CWE-61 UNIX Symbolic Link (Symlink) Following

Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied

Dulwich: Symlink write-through in checkout(paths=[]) via raw os.open bypasses all symlink protections

podman kube play symlink traversal vulnerability

Language Servers for AWS vulnerable to arbitrary file write

NLTK: Downloader.download follows hardlinks and overwrites outside-root files

Smarty: Symlink path traversal out of trusted directories

`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive

skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source

Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym

Cargo crates in third party registries can override the cached source of other crates

OpenTofu: Provider cache installation follows root-module-controlled package directory symlink and writes outside the working tree

runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

Arbitrary host CRI log file read via symlink following in CRI checkpoint restore

BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284

Docker: Race condition in docker cp allows bind mount redirection to host path

Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap

PDM: Project-Local State and Config Writes Follow Symlinks

ONNX: External Data Symlink Traversal

skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion

pgAdmin 4 File Manager has symbolic-link path traversal

Kata Container has CopyFile Policy Subversion via Symlinks

zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write

OpenClaw contains a symlink traversal vulnerability