CWE-65: Windows Hard Link

The product, when opening a file or directory, does not sufficiently handle when the name is associated with a hard link to a target that is outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.

Published:19 Jul 2006

Organization:MITRE

Modified:11 Dec 2025

Related Weakness

CWE-59: Improper Link Resolution Before File Access ('Link Following')

Details