CVE-2026-91762 · Vendor
NO FIX YET · SEE WHAT TO DO
Hitachi Dynamic Link Manager for Linux follows UNIX symbolic links unsafely in versions from 8.5.3-00 before 9.0.5-00. A local user who can plant a symlink can likely make the product read or write files it should not reach.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only Linux servers running Hitachi Dynamic Link Manager in the affected range are exposed. The sources do not describe the exact privilege or path needed to plant the symlink, so the precise exposure is unknown.
Not affected if fixed-version, not-installed
Who cares dynamic-link-manager, hitachi, linux
8.5.3-00 to before 9.0.5-009.0.5-00 or later, per the affected range in the NVD entryUNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.
This issue affects Hitachi Dynamic Link Manager for Linux: from 8.5.3.-00 before 9.0.5-00.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.