Symbolic Link Vulnerability in Smarty Template Engine by Smarty
CVE-2026-62992
6.9MEDIUM
What is CVE-2026-62992?
The Smarty template engine for PHP has a vulnerability where the Security::_checkDir() method does not fully resolve symbolic links before validating that a requested path lies within a secure directory. This flaw allows an attacker to place a symlink in a trusted directory, potentially pointing to unintended paths outside of the designated secure directory. As a result, unauthorized access to arbitrary files on the server may occur, posing significant security risks. This issue has been addressed in versions 5.8.2 and 4.5.7.
Affected Version(s)
smarty >= 5.0.0, < 5.8.2 < 5.0.0, 5.8.2
smarty < 4.5.7 < 4.5.7