CVE Explorer

CVE-2026-23893

openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX. Versions 2.3.2 and above are vulnerable to symlink-following when running in privileged contexts. A token-group user can redirect file operations to arbitrary filesystem targets by planting symlinks in group-writable token directories, resulting in privilege escalation or data exposure. Token and lock directories are 0770 (group-writable for token users), so any token-group member can plant files and symlinks inside them.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:421b6ab1ac8c147ae2a4d164533029583b045b323427d97e4121f29a0f5c1109

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"product":"opencryptoki","vendor":"opencryptoki","versions":[{"status":"affected","version":">= 2.3.2"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e85288b4ae603d2011bf5d960c5bdb9e39c74d47655204c5a9e5cb216eeb3166 · sha256:25cd60dc0d447256… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:e85288b4ae603d2011bf5d960c5bdb9e39c74d47655204c5a9e5cb216eeb3166 · sha256:25cd60dc0d447256… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-59","description":"CWE-59: Improper Link Resolution Before File Access ('Link Following')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:e85288b4ae603d2011bf5d960c5bdb9e39c74d47655204c5a9e5cb216eeb3166 · sha256:25cd60dc0d447256… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"name":"https://github.com/opencryptoki/opencryptoki/commit/5e6e4b42f2b1fcc1e4ef1b920e463bfa55da8b45","tags":["x_refsource_MISC"],"url":"https://github.com/opencryptoki/opencryptoki/commit/5e6e4b42f2b1fcc1e4ef1b920e463bfa55da8b45"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e85288b4ae603d2011bf5d960c5bdb9e39c74d47655204c5a9e5cb216eeb3166 · sha256:25cd60dc0d447256… · /containers/cna/references/1

{"name":"https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-j6c7-mvpx-jx5q","tags":["x_refsource_CONFIRM"],"url":"https://github.com/opencryptoki/opencryptoki/security/advisories/GHSA-j6c7-mvpx-jx5q"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e85288b4ae603d2011bf5d960c5bdb9e39c74d47655204c5a9e5cb216eeb3166 · sha256:25cd60dc0d447256… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer