CVE-2026-56651

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-56651
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-56651.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-56651
Published
2026-08-27T13:22:17.566Z
Modified
2026-08-28T11:30:14.294879801Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Arbitrary File Overwrite via Symlink Following in dool project
Details

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to truncate and overwrite the target file with log data, which is especially impactful if dool is run with elevated privileges. The issue was addressed by pull request #116

Database specific 
{
    "cna_assigner": "CERT-PL",
    "cwe_ids": [
        "CWE-59"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/56xxx/CVE-2026-56651.json"
}
References

Affected packages

Git / github.com/scottchiefbaker/dool

Affected ranges

Type
GIT
Repo
https://github.com/scottchiefbaker/dool
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b74503e2dfbca8ef01c284d40aa77dc82be308b9
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.8"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.7.2
0.7.3
v0.*
v0.7.4
v0.9
v1.*
v1.0.0
v1.1.0
v1.2.0
v1.3.0
v1.3.1
v1.3.2
v1.3.3
v1.3.4
v1.3.6
v1.3.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-56651.json"