CVE-2025-0913

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue concerns the behavior of os.OpenFile when the target path is a dangling symlink. On Unix systems, os.OpenFile with O CREATE and O EXCL flags never follows symlinks. However, on Windows, if the target path was a symlink to a nonexistent location, os.OpenFile would create a file in that location. This discrepancy has been addressed, and now os.OpenFile always returns an error when the O CREATE and O EXCL flags are both set and the target path is a symlink.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.