CVE-2026-119291— zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory

Quick assessment

Affected

zuke-build zuke

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Zuke 是一个面向 Deno 的“代码优先、强类型”构建自动化系统。在 1.4.0 版本之前，@zuke/cli 使用 lstat 来检查脚手架名称，随后却在 zuke setup 和 zuke import 命令中执行了跟随符号链接的读取、写入及权限变更操作。若攻击者提供一个包含指向非预期位置的符号链接的不可信克隆仓库、模板或归档文件，且该符号链接使用了脚手架名称，则 setup 命令可能以当前用户权限覆盖选定目录之外的目标文件。其中，.gitignore 路径无需任何标志即可触发此问题；而 --force 标

CVSS 5.5 · Medium Updated Oct 31, 2026

Possible ATT&CK Techniques 2 AI

T1548.001 · Setuid and Setgid T1565.003 · Runtime Data Manipulation

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory

Source: CVE Program / CVE List V5

Vulnerability Description

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect scaffold names but then performs link-following reads, writes, and permission changes in zuke setup and zuke import. An attacker who supplies an untrusted cloned repository, template, or archive with a symbolic link at a scaffolded name can cause setup to overwrite a target outside the selected directory with the invoking user's permissions. The .gitignore path requires no flag, while --force permits a linked launcher target to be written and made executable; import can also read link-target content and incorporate it into the generated build file. This issue is fixed in version 1.4.0.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

在文件访问前对链接解析不恰当(链接跟随)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
zuke-build	zuke	< 1.4.0	-

II. Public POCs for CVE-2026-119291

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-119291

请登录查看更多情报信息。

Other References for CVE-2026-119291 (4)

https://github.com/zuke-build/zuke/pull/542 x_refsource_MISC
https://github.com/zuke-build/zuke/releases/tag/cli-v1.4.0 x_refsource_MISC
https://github.com/zuke-build/zuke/security/advisories/GHSA-hc8w-3fgv-22pw x_refsource_CONFIRM
https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-119291

Same Patch Batch · zuke-build · 2026-10-30 · 5 CVEs total

CVE-2026-119287	8.0 HIGH	Zuke: Command-form registry descriptors bypass the MCP launch policy
CVE-2026-119290	7.5 HIGH	Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing
CVE-2026-119289	7.1 HIGH	Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who
CVE-2026-119288	7.0 HIGH	Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-pa

IV. Related Vulnerabilities

Same product: zuke

Same vendor: zuke-build

Same weakness: CWE-59