CVE-2026-91763 · Vendor
NO FIX YET · SEE WHAT TO DO
Hitachi Dynamic Link Manager for Linux follows UNIX symbolic links in a way that can be abused, per the NVD description. A local user who can plant a symlink may be able to make the product act on files it should not touch.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Organizations running Hitachi Dynamic Link Manager for Linux from 8.6.2-00 before 9.0.5-00. The sources do not describe the exact configuration that makes a system exposed, so the local-user requirement and the symlink path are unknown. Systems not running this product can skip it.
Not affected if not-running-product
Who cares dynamic-link-manager, enterprise, hitachi, linux
8.6.2-00 to before 9.0.5-009.0.5-00 or later, per the affected range in the NVD descriptionUNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.