CVE-2026-85092

Katalog CVE

CVSS 6.6 · Medium EPSS 0,16%

Kerentanan Improper Link Resolution Before File Access ('Link Following'). Skor CVSS 3.1 6.6 (Medium) menurut vulncheck.com.

Deskripsi (NVD)

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link with the expected filename pointing to any root-owned file, and when the acquisition runs in kernel context, LiME follows the link and truncates the target file with the memory acquisition stream.

Rincian

Terbit di NVD

3 September 2026

Terakhir diubah

10 September 2026

Status NVD

Deferred

CVSS 3.1

6.6 (Medium), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 5,0% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://gist.github.com/thesmartshadow/5355949144749b431da41490b63598f5
• https://github.com/jtsylve/LiME
• https://github.com/jtsylve/LiME/blob/v1.12.0/src/disk.c#L63
• https://www.vulncheck.com/advisories/lime-through-1.12.0-arbitrary-file-overwrite-via-symlink-following