THREATOPS
THREAT OPSThreat News › Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection

Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection

lowfulldisclosurePublished 2026-08-26

<p>Posted by Ron E on Aug 26</p>Chronicle Wire&apos;s FileMarshallableOut follows symbolic links when writing<br /> files in append mode. When ?append=true is enabled, the implementation<br /> opens the supplied output path directly using FileOutputStream(path, true)<br /> without preventing symbolic-link resolution.<br /> <br /> If an attacker can create or replace the expected output file with a

Original source: https://seclists.org/fulldisclosure/2026/Aug/83