Security: touch_path follows symlinks (CWE-59) #1056

New issue

Copy link

New issue

Copy link

Closed

Closed

Security: touch_path follows symlinks (CWE-59)#1056

Copy link

Labels

bugSomething isn't workingSomething isn't working

Description

mlim19

opened on Sep 30, 2026

Issue body actions

touch_path() in gprofiler/utils/init.py follows symlinks when creating files and setting permissions. This could allow privilege escalation in certain scenarios.

Activity

1. mlim19

   added

   bugSomething isn't workingSomething isn't working

   on Sep 30, 2026
2. mlim19 commented on Oct 20, 2026

   

   mlim19

   on Oct 20, 2026

   ContributorAuthor

   More actions

   The fix is made in #1060
3. mlim19

   closed this as completedon Oct 20, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

Labels

bugSomething isn't workingSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions

• Open in GitHub Copilot app