Symlink Attack
A security attack technique that exploits filesystem symbolic links. By replacing a target path with a symbolic link pointing to a sensitive file between the time a program checks and the time it reads the file, an attacker can cause the program to access protected content outside its intended working directory.
Timeline (last 90 days)
A symlink attack exploits the time window between when a program opens a file and when it actually reads the file to replace the target path, a security vulnerability known as a TOCTOU (Time-of-Check to Time-of-Use) race condition.
This fix blocks symlink attack paths by performing canonical path validation at read time and rejecting links that ultimately point outside the working directory.
All Facts (2)
A symlink attack exploits the time window between when a program opens a file and when it actually reads the file to replace the target path, a security vulnerability known as a TOCTOU (Time-of-Check to Time-of-Use) race condition.
50%UnverifiedThis fix blocks symlink attack paths by performing canonical path validation at read time and rejecting links that ultimately point outside the working directory.
50%