Symlink and TOCTOU flaws enable arbitrary file writes across multiple tools

Multiple newly disclosed vulnerabilities exposed arbitrary file write paths through symlink handling and path validation failures in developer and server-side software. In Crawl4AI before 0.8.8, CVE-2026-56258 affects screenshot and PDF endpoints by combining weak output_path validation, symlink following, and a TOCTOU race, allowing unauthenticated remote attackers to write files outside the intended directory and potentially reach code execution. In Cursor Desktop before 3.0, CVE-2026-50549 lets a malicious agent escape the workspace sandbox by forcing path canonicalization to fail and then abusing an in-workspace symlink to write arbitrary files under the user’s privileges, including paths that could enable later unsandboxed execution.

A related pattern also appeared in archive extraction and privileged upload handling. The extract-zip package is affected by CVE-2026-56876, which fails to validate symlink targets inside ZIP archives, enabling path traversal outside the extraction directory and possible arbitrary file read or write when processing untrusted archives. Separately, pwnlift disclosed CVE-2026-56815 in a privileged upload handler that could be abused for arbitrary file write as root through direct symlink following and a TOCTOU race; an initial fix was bypassable before a follow-up patch was merged, while one downstream deployment mitigated exposure by removing the privileged sudo entry. Together, the disclosures highlight recurring risk from incomplete path canonicalization, unsafe symlink handling, and containment checks in file-write workflows.