CVE-2026-56651CWE-59

CVE-2026-56651

published August 27, 2026

CVSS
2.0
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to truncate and overwrite the target file with log data, which is especially impactful if dool is run with elevated privileges.

The issue was addressed by pull request #116

The record
Technical detail
CVSS
2.0 · NONE
CVSS v4.0
2.0 · CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00187 · 7.9th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-08-27T21:18Z
References (2)
https://cert.pl/en/posts/2026/08/CVE-2026-56651 · [email protected]https://github.com/scottchiefbaker/dool/pull/116 · [email protected]
EPSS history
Timeline
  • 27 AUG 13:22Z
    Arbitrary File Overwrite via Symlink Following in dool project
    cvelistv5