The issue was addressed by pull request #116
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| scottchiefbaker | dool | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 27 Aug 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to truncate and overwrite the target file with log data, which is especially impactful if dool is run with elevated privileges. The issue was addressed by pull request #116 | |
| Title | Arbitrary File Overwrite via Symlink Following in dool project | |
| First Time appeared |
Scottchiefbaker
Scottchiefbaker dool |
|
| Weaknesses | CWE-59 | |
| CPEs | cpe:2.3:a:scottchiefbaker:dool:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Scottchiefbaker
Scottchiefbaker dool |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: CERT-PL
Published:
Updated: 2026-08-27T13:22:17.566Z
Reserved: 2026-06-22T15:34:38.575Z
Link: CVE-2026-56651
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-08-27T17:18:51.817
Modified: 2026-08-27T17:18:51.817
Link: CVE-2026-56651
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-59
Improper Link Resolution Before File Access ('Link Following')