Link Following

An attack in which a low-privileged user substitutes a symbolic link, junction or hard link for a path a privileged process is about to use, so the privileged file operation acts on an attacker-chosen target. It is a common route from local code execution to SYSTEM.