---
id: "CVE-2026-123496"
page: "https://infrastack.ai/live/CVE-2026-123496"
kind: "vulnerability"
aliases: ["CVE-2026-123496"]
title: "Vikunja veans: symlink following lets init write files outside repository"
severity: "medium"
cvss: 4.8
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: []
ecosystems: []
tags: ["ai-tooling", "claude-code", "opencode", "veans", "vikunja"]
not_affected_if: ["trusted-repos-only", "veans-2.7.1-or-later"]
published_at: "2026-11-08T02:16:36+00:00"
first_seen_at: "2026-11-08T02:21:07+00:00"
updated_at: "2026-11-08T02:25:30+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123496", "first_seen_at": "2026-11-08T02:21:07+00:00"}]
exploit_sources: []
---

# Vikunja veans: symlink following lets init write files outside repository

Link for people: https://infrastack.ai/live/CVE-2026-123496 (this .md is for agents)

Before version 2.7.1, the veans CLI's init command follows symlinks in a crafted repository, so it writes files outside the project. An attacker can use this to overwrite user files such as ~/.bashrc or install veans hooks and plugins globally.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed veans version with `veans --version` (exact flag unknown from sources).
- Look for symlinked `.veans.yml`, `.claude` or `.opencode` entries in repositories you cloned and ran veans init in.

## Fix

- veans: move to `2.7.1` or later

## Timeline

- 2026-11-08T02:21:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123496

## Documents

- [advisory] Vendor advisory: github.com https://github.com/go-vikunja/vikunja/security/advisories/GHSA-rxwp-q2qg-98vw
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/vikunja-veans-before-2.7.1-symlink-following-in-veans-init

## From the sources

Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows attackers to make veans init write files outside the repository via crafted repo symlinks. Attackers can ship symlinked .veans.yml, .claude, or .opencode entries to overwrite user files like ~/.bashrc or install veans hooks and plugins globally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_