{"id":"CVE-2026-91764","kind":"vulnerability","aliases":["CVE-2026-91764"],"related":[],"title":"Hitachi Dynamic Link Manager for Linux: symlink flaw lets local users access files","description":"Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 6.1.1.-00 before 9.0.5-00.","summary":"Hitachi Dynamic Link Manager for Linux, versions from 6.1.1-00 before 9.0.5-00, resolves links before accessing files in a way that can be abused. A local attacker can use this to reach files they should not be able to access, with a CVSS score of 8.1.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dynamic-link-manager","hitachi","linux","vendor"],"not_affected_if":["fixed-version","not-installed"],"how_to_check":"- Check the installed Dynamic Link Manager for Linux version against the affected range (`6.1.1-00` to before `9.0.5-00`).","fix":"- Move Dynamic Link Manager for Linux to `9.0.5-00` or later.","status":"open","published_at":"2026-11-10T05:18:16+00:00","first_seen_at":"2026-11-10T05:19:59+00:00","triaged_at":"2026-11-10T05:22:12+00:00","updated_at":"2026-11-10T05:22:12+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-10T05:22:12Z","model":"claude-haiku-5-5","output":{"fix":"- Move Dynamic Link Manager for Linux to `9.0.5-00` or later.","reach":"local","title":"Hitachi Dynamic Link Manager for Linux: symlink flaw lets local users access files","impact":"high","summary":"Hitachi Dynamic Link Manager for Linux, versions from 6.1.1-00 before 9.0.5-00, resolves links before accessing files in a way that can be abused. A local attacker can use this to reach files they should not be able to access, with a CVSS score of 8.1.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["hitachi","dynamic-link-manager","linux"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"local user reads or writes files outside their permissions","analyst_note":"Confirm the trigger conditions and privilege required from the Hitachi advisory; the sources give only the NVD description and version range.","how_to_check":"- Check the installed Dynamic Link Manager for Linux version against the affected range (`6.1.1-00` to before `9.0.5-00`).\n- unknown for other checks: the sources do not say.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["not-installed","fixed-version"],"who_is_affected":"Only servers running Hitachi Dynamic Link Manager for Linux in the affected version range are exposed. The sources do not describe the exact configuration needed to trigger the flaw.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000729,"input_tokens":4543,"output_tokens":550,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-00':36B,39B,99C,102C '-2026':15A,18A '-91764':16A,19A '6.1.1':35B,98C '8.1':73B '9.0.5':38B,101C 'abl':65B 'abus':51B 'access':12A,43B,67B,79C 'affect':90C 'attack':54B 'cve':14A,17A 'cvss':70B 'dynam':2A,21B,28B,83C,92C 'dynamic-link-manag':20B 'file':13A,44B,60B,78C 'flaw':8A 'hitachi':1A,24B,27B,82C,91C 'improp':74C 'issu':89C 'let':9A 'link':3A,22B,29B,41B,75C,84C,93C 'linux':6A,25B,32B,87C,96C 'local':10A,53B 'manag':4A,23B,30B,85C,94C 'reach':59B 'resolut':76C 'resolv':40B 'score':71B 'symlink':7A 'use':56B 'user':11A 'vendor':26B 'version':33B 'vulner':80C 'way':47B","nicknames":[],"mitigations":[],"who_affected":"Only servers running Hitachi Dynamic Link Manager for Linux in the affected version range are exposed. The sources do not describe the exact configuration needed to trigger the flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dynamiclinkmanager","high","hitachi","linux","vendor"],"campaign_type":null,"search_a":"'-2026':15A,18A '-91764':16A,19A 'access':12A 'cve':14A,17A 'dynam':2A 'file':13A 'flaw':8A 'hitachi':1A 'let':9A 'link':3A 'linux':6A 'local':10A 'manag':4A 'symlink':7A 'user':11A","search_b":"'-00':36B,39B '6.1.1':35B '8.1':73B '9.0.5':38B 'abl':65B 'abus':51B 'access':43B,67B 'attack':54B 'cvss':70B 'dynam':21B,28B 'dynamic-link-manag':20B 'file':44B,60B 'hitachi':24B,27B 'link':22B,29B,41B 'linux':25B,32B 'local':53B 'manag':23B,30B 'reach':59B 'resolv':40B 'score':71B 'use':56B 'vendor':26B 'version':33B 'way':47B","search_c":"'-00':99C,102C '6.1.1':98C '9.0.5':101C 'access':79C 'affect':90C 'dynam':83C,92C 'file':78C 'hitachi':82C,91C 'improp':74C 'issu':89C 'link':75C,84C,93C 'linux':87C,96C 'manag':85C,94C 'resolut':76C 'vulner':80C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T05:18:16+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91764","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91764","severity":null,"published_at":"2026-11-10T05:18:16+00:00","modified_at":"2026-11-10T05:18:16+00:00","first_seen_at":"2026-11-10T05:19:59+00:00","fetched_at":"2026-11-10T05:19:59+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}