{"id":"CVE-2026-91763","kind":"vulnerability","aliases":["CVE-2026-91763"],"related":[],"title":"Hitachi Dynamic Link Manager for Linux: symlink following flaw lets local users escalate","description":"UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux.\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.","summary":"Hitachi Dynamic Link Manager for Linux follows UNIX symbolic links in a way that can be abused, per the NVD description. A local user who can plant a symlink may be able to make the product act on files it should not touch.","severity":"high","cvss":8.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dynamic-link-manager","enterprise","hitachi","linux","vendor"],"not_affected_if":["not-running-product"],"how_to_check":"- Check the installed version of Hitachi Dynamic Link Manager for Linux against the affected range `8.6.2-00` to before `9.0.5-00`","fix":"- Move Hitachi Dynamic Link Manager for Linux to `9.0.5-00` or later, per the affected range in the NVD description","status":"open","published_at":"2026-11-10T05:18:16+00:00","first_seen_at":"2026-11-10T05:19:59+00:00","triaged_at":"2026-11-10T05:22:09+00:00","updated_at":"2026-11-10T05:22:09+00:00","category":"vendor","confidence":0.5,"triage":{"at":"2026-11-10T05:22:09Z","model":"claude-haiku-5-5","output":{"fix":"- Move Hitachi Dynamic Link Manager for Linux to `9.0.5-00` or later, per the affected range in the NVD description","reach":"local","title":"Hitachi Dynamic Link Manager for Linux: symlink following flaw lets local users escalate","impact":"high","summary":"Hitachi Dynamic Link Manager for Linux follows UNIX symbolic links in a way that can be abused, per the NVD description. A local user who can plant a symlink may be able to make the product act on files it should not touch.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["hitachi","linux","dynamic-link-manager","enterprise"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"local user may act on protected files via symlinks","analyst_note":"Check the Hitachi security advisory for CVE-2026-91763 for privilege requirements, exact affected files and the fix path; the NVD text alone does not say.","how_to_check":"- Check the installed version of Hitachi Dynamic Link Manager for Linux against the affected range `8.6.2-00` to before `9.0.5-00`\n- unknown for other checks: the sources do not say","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["not-running-product"],"who_is_affected":"Organizations running Hitachi Dynamic Link Manager for Linux from 8.6.2-00 before 9.0.5-00. The sources do not describe the exact configuration that makes a system exposed, so the local-user requirement and the symlink path are unknown. Systems not running this product can skip it.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000754,"input_tokens":4553,"output_tokens":598,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-00':95C,98C '-2026':15A,18A '-91763':16A,19A '8.6.2':94C '9.0.5':97C 'abl':59B 'abus':44B 'act':64B 'affect':86C 'cve':14A,17A 'descript':48B 'dynam':2A,21B,29B,79C,88C 'dynamic-link-manag':20B 'enterpris':24B 'escal':13A 'file':66B 'flaw':9A 'follow':8A,34B,75C 'hitachi':1A,25B,28B,78C,87C 'issu':85C 'let':10A 'link':3A,22B,30B,37B,73C,80C,89C 'linux':6A,26B,33B,83C,92C 'local':11A,50B 'make':61B 'manag':4A,23B,31B,81C,90C 'may':57B 'nvd':47B 'per':45B 'plant':54B 'product':63B 'symbol':36B,72C 'symlink':7A,56B,74C 'touch':70B 'unix':35B,71C 'user':12A,51B 'vendor':27B 'vulner':76C 'way':40B","nicknames":[],"mitigations":[],"who_affected":"Organizations running Hitachi Dynamic Link Manager for Linux from 8.6.2-00 before 9.0.5-00. The sources do not describe the exact configuration that makes a system exposed, so the local-user requirement and the symlink path are unknown. Systems not running this product can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dynamiclinkmanager","enterprise","high","hitachi","linux","vendor"],"campaign_type":null,"search_a":"'-2026':15A,18A '-91763':16A,19A 'cve':14A,17A 'dynam':2A 'escal':13A 'flaw':9A 'follow':8A 'hitachi':1A 'let':10A 'link':3A 'linux':6A 'local':11A 'manag':4A 'symlink':7A 'user':12A","search_b":"'abl':59B 'abus':44B 'act':64B 'descript':48B 'dynam':21B,29B 'dynamic-link-manag':20B 'enterpris':24B 'file':66B 'follow':34B 'hitachi':25B,28B 'link':22B,30B,37B 'linux':26B,33B 'local':50B 'make':61B 'manag':23B,31B 'may':57B 'nvd':47B 'per':45B 'plant':54B 'product':63B 'symbol':36B 'symlink':56B 'touch':70B 'unix':35B 'user':51B 'vendor':27B 'way':40B","search_c":"'-00':95C,98C '8.6.2':94C '9.0.5':97C 'affect':86C 'dynam':79C,88C 'follow':75C 'hitachi':78C,87C 'issu':85C 'link':73C,80C,89C 'linux':83C,92C 'manag':81C,90C 'symbol':72C 'symlink':74C 'unix':71C 'vulner':76C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T05:18:16+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91763","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91763","severity":null,"published_at":"2026-11-10T05:18:16+00:00","modified_at":"2026-11-10T05:18:16+00:00","first_seen_at":"2026-11-10T05:19:59+00:00","fetched_at":"2026-11-10T05:19:59+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}