THREAT OPS › Threat News › Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection
Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection
<p>Posted by Ron E on Aug 26</p>Chronicle Wire's FileMarshallableOut follows symbolic links when writing<br /> files in append mode. When ?append=true is enabled, the implementation<br /> opens the supplied output path directly using FileOutputStream(path, true)<br /> without preventing symbolic-link resolution.<br /> <br /> If an attacker can create or replace the expected output file with a
Original source: https://seclists.org/fulldisclosure/2026/Aug/83