4.7Mittel
CVE-2026-5061Consul-template vulnerable to sandbox path bypass in file helper via a symlink attack
Beschreibung
The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.
Schwachstellentyp (CWE):
CWE-59
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.