CWE-59: Improper Link Resolution Before File Access ('Link Following')
Also known as: insecure temporary file, Zip Slip
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Last updated
Overview
CWE-59 (Improper Link Resolution Before File Access ('Link Following')) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.
Background
Soft links are a UNIX term that is synonymous with simple shortcuts on Windows-based platforms.
Real-world CVEs
561 recorded CVEs are caused by CWE-59 (Improper Link Resolution Before File Access ('Link Following')), including 20 in CISA's KEV (Known Exploited Vulnerabilities) catalog. KEVs are shown first. 114 new CWE-59 CVEs have been recorded so far in 2026 (121 in 2025).