Common Weakness Enumeration

    CWE Definition / CWE-278

    CWE-278: Insecure Preserved Inherited Permissions

    A product inherits a set of insecure permissions for an object, e.g. when copying from an archive file, without user awareness or involvement.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-732: Incorrect Permission Assignment for Critical Resource