CVE-2026-39822
Vulnerability Description
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Go standard library
Product
os
Discussion (0)
Add Comment
No comments yet. Be the first!