CVE-2026-56651

Name of the Vulnerable Software and Affected Versions Dool versions prior to 1.3.9

Description The application is susceptible to symlink following when the --devel flag is active. This occurs because the software opens a log file without the O NOFOLLOW flag, which is a system-level instruction that prevents the application from following symbolic links. A local attacker can create a symlink at the expected log file path that points to a sensitive file, leading the application to truncate and overwrite the target file with log data. This impact is increased if the application is executed with elevated privileges.

Recommendations Update to version 1.3.9 or later. As a temporary mitigation, avoid using the --devel flag.