Unverified50% confidenceFactExact time
A symlink attack exploits the time window between when a program opens a file and when it actually reads the file to replace the target path, a security vulnerability known as a TOCTOU (Time-of-Check to Time-of-Use) race condition.
1
Sources
50%
Confidence
Long-term
Relevance
10/6/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe attack entry point was a malicious dataset that exploited two code execution paths: a remote code dataset loader and a configuration template injection.62% similarUnverified该漏洞的技术本质是PATH劫持攻击，Cursor执行Git操作时会从项目目录中查找并调用git可执行文件61% similarUnverifiedCommon fixes for TOCTOU vulnerabilities include using atomic file operations, normalizing path validation (such as realpath resolution), or switching from path strings to file descriptors.60% similarUnverifiedA Path Traversal attack is one in which an attacker constructs special file paths (such as using '../' to navigate to a parent directory) to access unauthorized files or directories on a server.59% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/979333API
curl https://kongchang.com/api/v1/knowledge/claims/979333MCP
get_claim(id=979333)