Common Weakness Enumeration
CWE-62 UNIX Hard Link
Description
The product, when opening a file or directory, does not sufficiently account for when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-62 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-2m67-cxxq-c3h8 | CVE-2026-32232 | HIGH | - |
ZeptoClaw: Path boundary checks bypass via symlink, TOCTOU, and hardlink |
2026-03-13 |
| GHSA-29q4-gxjq-rx5c | CVE-2021-21479 | HIGH |
Remote Code Execution in SCIMono |
2021-02-10 |