Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to truncate and overwrite the target file with log data, which is especially impactful if dool is run with elevated privileges.
The issue was addressed by pull request #116
The issue was addressed by pull request #116
Metrics
Affected Vendors & Products
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 27 Aug 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to truncate and overwrite the target file with log data, which is especially impactful if dool is run with elevated privileges. The issue was addressed by pull request #116 | |
| Title | Arbitrary File Overwrite via Symlink Following in dool project | |
| First Time appeared |
Scottchiefbaker
Scottchiefbaker dool |
|
| Weaknesses | CWE-59 | |
| CPEs | cpe:2.3:a:scottchiefbaker:dool:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Scottchiefbaker
Scottchiefbaker dool |
|
| References |
| |
| Metrics |
cvssV4_0
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: CERT-PL
Published:
Updated: 2026-08-27T13:22:17.566Z
Reserved: 2026-06-22T15:34:38.575Z
Link: CVE-2026-56651
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-08-27T17:18:51.817
Modified: 2026-08-27T17:18:51.817
Link: CVE-2026-56651
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses