一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-39822 [HIGH] – On Unix systems, opening a file in an os.Root improperly follows symlinks to locations out

未分类
📑 文章目录

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, ‘root.Open(“symlink/”)’ will open “symlink” even when “symlink” is a symbolic link pointing outside of the root.