TI-2026-28704 CVE-2026-39822 · GHSA-xcgv-8mv7-v8c7
Root escape via symlink plus trailing slash in os
Priority LOW 36
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /.