CyberRota Analysis
AI-GeneratedUnix systems are vulnerable to a high-severity issue where the os.Root function improperly follows symbolic links, allowing access to files outside of the intended root directory when the final path component is a symlink. This can lead to unauthorized file access and potential data exposure. System administrators and developers managing Unix environments should prioritize addressing this vulnerability to mitigate risks associated with improper access controls.
Original NVD Description
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.
Related CVEs
Other vulnerabilities affecting the same vendor(s)