CWE-61 类弱点 131 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-61 属于路径遍历类漏洞，指程序在处理文件路径时未充分验证符号链接的目标位置。攻击者通常通过构造指向系统敏感文件的恶意符号链接，诱导程序读取或修改非预期控制域内的文件，从而获取敏感数据或提升权限。开发者应避免直接信任用户输入的路径，在访问文件前严格校验符号链接指向，确保其位于预期的安全目录范围内，或禁用符号链接解析以消除风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-90616 | Flatpak 1.18.1前沙箱符号链接逃逸致主机代码执行 — Flatpak | 7.4 | High | 2026-09-12 |
| CVE-2026-77159 | libvirt 符号链接导致的文件属主变更漏洞 — Red Hat Enterprise Linux 10 | 5.5 | Medium | 2026-09-11 |
| CVE-2026-57825 | OCaml opam 后置链接漏洞 — opam | 5.7 | Medium | 2026-09-09 |
| CVE-2026-79939 | Dell Power Protect Cyber Recovery 后置链接漏洞 — Power Protect Cyber Recovery | 5.8 | Medium | 2026-08-26 |
| CVE-2026-75038 | Ilya Zlobintsev Linux GPU Control Application 后置链接漏洞 — LACT | 6.1 | Medium | 2026-08-25 |
| CVE-2026-64846 | Nix 竞争条件问题漏洞 — nix | 2.8 | Low | 2026-08-20 |
| CVE-2026-32657 | Dell AppSync 后置链接漏洞 — AppSync | 7.3 | High | 2026-08-18 |
| CVE-2026-47766 | Containers crun 后置链接漏洞 — crun | 5.1 | Medium | 2026-08-14 |
| CVE-2026-53802 | RsyncProject Rsync 后置链接漏洞 — rsync | 7.1 | High | 2026-08-13 |
| CVE-2026-47763 | PDM 后置链接漏洞 — pdm | 6.8 | Medium | 2026-08-04 |
| CVE-2026-54574 | Termux PRoot-Distro 后置链接漏洞 — proot-distro | 8.2 | High | 2026-07-29 |
| CVE-2026-56748 | Cribl Stream 后置链接漏洞 — Cribl Stream | 8.8 | High | 2026-07-27 |
| CVE-2026-17459 | perwendel Spark 后置链接漏洞 — spark | 4.3 | Medium | 2026-07-26 |
| CVE-2026-65010 | Hugging Face Datasets 后置链接漏洞 — datasets | 6.6 | Medium | 2026-07-23 |
| CVE-2026-12080 | QEMU 后置链接漏洞 — Red Hat Enterprise Linux 10 | 7.3 | High | 2026-07-20 |
| CVE-2026-59674 | SUSE openSUSE Tumbleweed 后置链接漏洞 — openSUSE Tumbleweed | - | - | 2026-07-14 |
| CVE-2026-14699 | zcaceres markdownify-mcp 后置链接漏洞 — markdownify-mcp | 3.3 | Low | 2026-07-05 |
| CVE-2026-53489 | containerd 后置链接漏洞 — containerd | - | - | 2026-07-01 |
| CVE-2026-41579 | opencontainers runc 后置链接漏洞 — runc | 3.3 | Low | 2026-07-01 |
| CVE-2026-55686 | Podman 后置链接漏洞 — podman | 5.3 | Medium | 2026-06-26 |
| CVE-2026-13218 | KubeVirt 后置链接漏洞 — Red Hat OpenShift Virtualization 4 | 4.2 | Medium | 2026-06-25 |
| CVE-2026-13201 | KubeVirt 后置链接漏洞 — Red Hat Container Native Virtualization 4.13 | 7.3 | High | 2026-06-24 |
| CVE-2026-55447 | Langflow 信息泄露漏洞 — langflow | 9.6 | Critical | 2026-06-23 |
| CVE-2026-12958 | Amazon Web Services Language Servers for AWS 后置链接漏洞 — Language Servers for AWS | 7.8 | High | 2026-06-23 |
| CVE-2026-56815 | Rasta Mouse pwnlift 后置链接漏洞 — pwnlift | 7.4 | High | 2026-06-23 |
| CVE-2026-49248 | Theonedev onedev 后置链接漏洞 — onedev | - | - | 2026-06-18 |
| CVE-2026-54420 | LiteSpeed cPanel Plugin 后置链接漏洞 — cPanel Plugin | 8.5 | High | 2026-06-14 |
| CVE-2026-42306 | Moby 竞争条件问题漏洞 — moby | 7.2 | High | 2026-06-12 |
| CVE-2026-5223 | Cargo 安全漏洞 — Cargo | - | - | 2026-05-25 |
| CVE-2026-8784 | cramfs-tools 后置链接漏洞 — cramfs-tools | 4.2 | Medium | 2026-05-18 |
CWE-61 是常见的弱点类别，本平台收录该类弱点关联的 131 条 CVE 漏洞。