{"id":"CVE-2026-91762","kind":"vulnerability","aliases":["CVE-2026-91762"],"related":[],"title":"Hitachi Dynamic Link Manager for Linux: symlink following flaw enables file access","description":"UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.5.3.-00 before 9.0.5-00.","summary":"Hitachi Dynamic Link Manager for Linux follows UNIX symbolic links unsafely in versions from 8.5.3-00 before 9.0.5-00. A local user who can plant a symlink can likely make the product read or write files it should not reach.","severity":"high","cvss":7.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dynamic-link-manager","hitachi","linux","vendor"],"not_affected_if":["fixed-version","not-installed"],"how_to_check":"- Check the installed Dynamic Link Manager version on Linux hosts against the affected range `8.5.3-00` to before `9.0.5-00`\n- Confirm whether the product is installed at all before acting on the range","fix":"- Move to `9.0.5-00` or later, per the affected range in the NVD entry","status":"open","published_at":"2026-11-10T05:18:16+00:00","first_seen_at":"2026-11-10T05:19:59+00:00","triaged_at":"2026-11-10T05:22:16+00:00","updated_at":"2026-11-10T05:22:16+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T05:22:16Z","model":"claude-haiku-5-5","output":{"fix":"- Move to `9.0.5-00` or later, per the affected range in the NVD entry","reach":"local","title":"Hitachi Dynamic Link Manager for Linux: symlink following flaw enables file access","impact":"medium","summary":"Hitachi Dynamic Link Manager for Linux follows UNIX symbolic links unsafely in versions from 8.5.3-00 before 9.0.5-00. A local user who can plant a symlink can likely make the product read or write files it should not reach.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["hitachi","linux","dynamic-link-manager"],"confidence":0.6,"fix_status":"available","needs_auth":"yes","worst_case":"local user reads or writes files outside intended scope","analyst_note":"Confirm the exact privilege needed and the affected file paths from the Hitachi advisory; NVD text alone is thin.","how_to_check":"- Check the installed Dynamic Link Manager version on Linux hosts against the affected range `8.5.3-00` to before `9.0.5-00`\n- Confirm whether the product is installed at all before acting on the range","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["not-installed","fixed-version"],"who_is_affected":"Only Linux servers running Hitachi Dynamic Link Manager in the affected range are exposed. The sources do not describe the exact privilege or path needed to plant the symlink, so the precise exposure is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00073,"input_tokens":4553,"output_tokens":549,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-00':41B,44B,90C,93C '-2026':14A,17A '-91762':15A,18A '8.5.3':40B,89C '9.0.5':43B,92C 'access':12A 'affect':81C 'cve':13A,16A 'dynam':2A,20B,27B,74C,83C 'dynamic-link-manag':19B 'enabl':10A 'file':11A,61B 'flaw':9A 'follow':8A,32B,70C 'hitachi':1A,23B,26B,73C,82C 'issu':80C 'like':54B 'link':3A,21B,28B,35B,68C,75C,84C 'linux':6A,24B,31B,78C,87C 'local':46B 'make':55B 'manag':4A,22B,29B,76C,85C 'plant':50B 'product':57B 'reach':65B 'read':58B 'symbol':34B,67C 'symlink':7A,52B,69C 'unix':33B,66C 'unsaf':36B 'user':47B 'vendor':25B 'version':38B 'vulner':71C 'write':60B","nicknames":[],"mitigations":[],"who_affected":"Only Linux servers running Hitachi Dynamic Link Manager in the affected range are exposed. The sources do not describe the exact privilege or path needed to plant the symlink, so the precise exposure is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dynamiclinkmanager","high","hitachi","linux","vendor"],"campaign_type":null,"search_a":"'-2026':14A,17A '-91762':15A,18A 'access':12A 'cve':13A,16A 'dynam':2A 'enabl':10A 'file':11A 'flaw':9A 'follow':8A 'hitachi':1A 'link':3A 'linux':6A 'manag':4A 'symlink':7A","search_b":"'-00':41B,44B '8.5.3':40B '9.0.5':43B 'dynam':20B,27B 'dynamic-link-manag':19B 'file':61B 'follow':32B 'hitachi':23B,26B 'like':54B 'link':21B,28B,35B 'linux':24B,31B 'local':46B 'make':55B 'manag':22B,29B 'plant':50B 'product':57B 'reach':65B 'read':58B 'symbol':34B 'symlink':52B 'unix':33B 'unsaf':36B 'user':47B 'vendor':25B 'version':38B 'write':60B","search_c":"'-00':90C,93C '8.5.3':89C '9.0.5':92C 'affect':81C 'dynam':74C,83C 'follow':70C 'hitachi':73C,82C 'issu':80C 'link':68C,75C,84C 'linux':78C,87C 'manag':76C,85C 'symbol':67C 'symlink':69C 'unix':66C 'vulner':71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T05:18:16+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91762","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91762","severity":null,"published_at":"2026-11-10T05:18:16+00:00","modified_at":"2026-11-10T05:18:16+00:00","first_seen_at":"2026-11-10T05:19:59+00:00","fetched_at":"2026-11-10T05:19:59+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}