CVE-2026-56857

Summary

This flaw allows attackers to create directories at arbitrary locations outside the intended root directory when using Root.Mkdir or Root.MkdirAll operations on junction points. This can lead to unauthorized file system modifications and potential privilege escalation.

Exploitability

Exploitation requires creating a junction point pointing to an empty location outside the root, then performing a mkdir operation on that junction, which is moderately difficult but possible with appropriate access to create junctions.

Blast radius

The impact could be significant as attackers may be able to write files anywhere in the file system, potentially leading to persistent backdoors or privilege escalation across multiple systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable junction point support in directory creation operations until a fixed version is available, or restrict access to junction points to prevent unauthorized creation of junctions.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.