CVE Database
/

CVE-2024-8244

Back to search

CVE-2024-8244

Published: Aug 6, 2025

Modified: Nov 3, 2025

PUBLISHED

Description

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.

VendorProductVersions

Go standard library

path/filepath

All versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now