Local privilege escalation via symlink race

Incorrect access control in CISOfy Lynis before 3.0.0 allows local users to alter log and report data through a symlink race. The symlink-detection and permission-check routine checks a file, but an attacker can remove and recreate it before Lynis uses it, replacing the checked object. Exploitation requires local access, another non-privileged user to run Lynis during the race, and absent kernel symlink protections; the manipulation supports denial of service, system-information disclosure, or privilege escalation.