Unverified50% confidenceFactExact time
This update fixes a vulnerability where plugin paths containing backslashes could previously bypass symlink security checks on macOS and Linux.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/11/2026
First Seen
Valid until: 12/10/2026
Sources
Related Entities
Related Claims
UnverifiedPreviously, deny and ask permission rules would fail on symlinked directories such as /etc, /tmp, and /var on macOS and /bin on Linux; the new version fixes this symlink permission bypass vulnerability.75% similarUnverifiedHistorical RouterOS vulnerabilities include CVE-2018-14847, a Winbox protocol vulnerability (allowing unauthorized users to read arbitrary files), and CVE-2019-3976, an SMB stack overflow (enabling remote code execution).62% similarUnverifiedLinux内核曾因编译器优化掉空指针检查而引入安全漏洞CVE-2009-189762% similarUnverifiedLinux kernel maintainer Greg Kroah-Hartman has publicly stated that he has received security fix patches that were clearly AI-generated, claiming to fix vulnerabilities that do not exist.62% similarUnverified2018年的Spectre/Meltdown CPU漏洞展示了通过侧信道攻击突破硬件隔离边界的可能性62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/900333API
curl https://kongchang.com/api/v1/knowledge/claims/900333MCP
get_claim(id=900333)