CVE-2026-109965
Description
A flaw was found in Serena. This vulnerability allows an attacker to access or overwrite sensitive files outside the intended project directory by tricking a user into opening a repository containing crafted symbolic links (shortcuts pointing to other file locations). Because file path validation does not resolve these links prior to verification, file operations can interact with arbitrary locations on the host system, leading to unauthorized data disclosure or file modification.
Statement
This vulnerability is rated as an Important severity because it permits both arbitrary file read and write operations across the host system, which could lead to the exposure or modification of sensitive user credentials. The potential blast radius is limited by the prerequisite of user interaction, requiring a local user to open or inspect an untrusted project containing malicious symbolic links. Furthermore, Red Hat products do not distribute the Serena component, leaving default installations unaffected.
Understanding the Weakness (CWE)
Confidentiality,Integrity,Access Control
Technical Impact: Read Files or Directories; Modify Files or Directories; Bypass Protection Mechanism
An attacker may be able to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. If the files are used for a security mechanism then an attacker may be able to bypass the mechanism.
Other
Technical Impact: Execute Unauthorized Code or Commands
Windows simple shortcuts, sometimes referred to as soft links, can be exploited remotely since a ".LNK" file can be uploaded like a normal file. This can enable remote execution.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
