CVE-2026-14361 — Consul-template is vulnerable to path redirection in writeToFile through symlink attack
The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outsi…
Published: 2026-07-08 · CVSS: 4.7 · CVSS 3.1
The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CVE-2026-14361) is fixed in consul-template 0.42.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7