CVE-2026-102204

No fix known EPSS <1%CVSS 7.8

Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

Published 2026-10-13 · CVE record · OSV

Products: Microsoft Windows Subsystem for Linux (WSL2)