CVE-2026-81690: Python Rglob Symlink Integrity Bypasscve-2026-81690-python-rglob-symlink-integrity-bypass
Using `Path.rglob()` for file integrity verification or manifest creation does not descend into symlinked directories and can allow planted files beneath symlinks to evade detection. Enumerate the directory tree using `os.walk(..., followlinks=False)` and explicitly validate or reject symlinks using `os.path.islink()`.