Skip to content
OpenAdvisories

Product · scottchiefbaker

dool

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.0
    CVE-2026-56651

    Arbitrary File Overwrite via Symlink Following in dool project

    Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "O_NOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing …

    scottchiefbaker dool