Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-44051

Arbitrary file read via attacker-controlled symlink creation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
securin

Description

An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacker-controlled symlink creation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netatalk Netatalk

Default version status: unaffected

  • 3.0.2 to ≤ 4.4.2affected
  • 4.4.3unaffected

References