Monthly
Access control bypass in Syncplify Server! before 8.8.0 allows authenticated SFTP users to evade per-path permission overrides by addressing a protected directory with alternate capitalization or its 8.3 short name, enabling file uploads and downloads the override is meant to deny. The flaw is conditional on an existing deny override and on filesystem behavior that accepts alternate case or short names, such as Windows/NTFS; on strictly case-sensitive filesystems without short-name generation the technique is limited. No public exploit was identified at time of analysis, and the vendor has released 8.8.0 as the fix.
Remote code execution in Microsoft Windows WebDAV lets a low-privileged, authenticated attacker reach the code-execution path over the network by exploiting improper resolution of path equivalence (CWE-41), yielding high confidentiality, integrity and availability impact (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8). The flaw spans supported Windows client and server releases from Windows 10 1607 and Windows Server 2012 through Windows 11 26H2 and Windows Server 2025, but only where the WebDAV/WebClient capability is enabled and network-reachable, since that service is not on by default across all SKUs and exploitation requires an existing low-privileged account. There is no public exploit code and no confirmed active exploitation at time of analysis (CISA SSVC exploitation: none); vendor patches that lift the affected builds above the enclosed fix levels are available from Microsoft. Note that source tagging labels this issue Information Disclosure, which understates the assessed code-execution impact.
Local privilege escalation in Microsoft's Windows Backup Engine (CWE-41, path equivalence mis-resolution) allows an authenticated, low-privileged attacker with local access to a Windows host to gain elevated privileges by manipulating a path that the Backup Engine resolves to an equivalent but attacker-controlled location; exploitation requires no user interaction (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 7.8). The attack surface is confined to hosts where an attacker already holds an unprivileged foothold, making multi-user systems, shared workstations, and terminal/RDP-style environments the realistic risk scenario rather than remote perimeter exposure. Microsoft has published fixed builds through the MSRC update guide, and no public exploit identified at time of analysis - no confirmed actively exploited (CISA KEV) status and no publicly available exploit code exists, so this is a credible but not emergency-tier patch-cycle priority.
Improper path-equivalence handling in Microsoft Windows SmartScreen allows an unauthenticated, remote attacker to bypass the reputation/Mark-of-the-Web check so that a crafted file runs without the expected SmartScreen warning, provided the victim opens it (user interaction required, CVSS 8.8). Only unpatched Windows 11 builds are affected - 24H2 before 10.0.26100.9711, 25H2 before 10.0.26200.9711, 26H1 before 10.0.28000.3231, and 26H2 before 10.0.26300.9711; no public exploit code has been identified at time of analysis, and CISA's SSVC assessment records exploitation as 'none' and not automatable, so urgency signals conflict between the high CVSS score and total technical impact and the absence of observed or automated exploitation. A vendor patch is available and should be applied through the normal Windows update channel.
Improper resolution of path equivalence (CWE-41) in Visual Studio Code allows an unauthenticated local attacker to bypass a security feature, likely Workspace Trust or restricted mode, by convincing a victim to open and interact with a crafted workspace or folder. The vulnerability requires user interaction and high attack complexity, and while it has a CVSS score of 7.7 (High), it is a moderate-priority developer-workstation issue rather than an internet-facing emergency. No public exploit code has been identified at time of analysis, and the exact affected versions should be confirmed via the linked Microsoft advisory.
Authenticated privilege escalation in Microsoft WebDAV lets a low-privileged network user bypass authorization by supplying an alternate but equivalent path representation, causing access-control checks to be evaluated against the wrong canonical path; successful exploitation yields high confidentiality, integrity, and availability impact (CVSS 8.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation requires an existing authorized account on the target plus network reach to the WebDAV service - it is not exploitable by a fully unauthenticated attacker - but needs no user interaction and has low attack complexity. At time of analysis there is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified; patch availability was not specified in the provided intelligence and should be confirmed against the Microsoft MSRC advisory.
MCPVault, a lightweight Model Context Protocol server that exposes Obsidian vault files to AI agents, fails to block access to restricted directories such as .git, .obsidian, and node_modules in versions prior to 0.11.4. PathFilter compiles its deny-list patterns case-sensitively and matches raw path segments, so on case-insensitive macOS and Windows filesystems variants like .Git/config or .GIT/config (and on Windows, trailing-dot/space forms such as .git./config) pass both isAllowed() and isAllowedForListing() while the operating system still opens the real restricted directory. An attacker who can influence a path selected by an AI agent can then read, write, move, search, or list sensitive repository and Obsidian metadata; no public exploit code or CISA KEV entry was identified at time of analysis.
Path canonicalization bypass in filebrowser before v2.63.21 permits authenticated users to circumvent administrator-configured deny rules by submitting case-variant or backslash-delimited path representations that the access rule engine fails to normalize before evaluation. The filesystem resolves these alternate representations to the same restricted objects, but the rules engine never matches them, effectively granting access to files the administrator explicitly intended to block. No public exploit code has been identified at time of analysis, though the attack concept is well-understood and straightforward to implement for any authenticated user of an affected deployment.
Permission-sandbox bypass in the Deno runtime (versions <= 2.7.13) on macOS lets untrusted code reach paths that operators explicitly blocked with --deny-read, --deny-write, --deny-run, or --deny-ffi. Because Deno compared paths byte-for-byte while APFS treats Unicode-equivalent and case-equivalent spellings as the same file, a script granted broad --allow-* but with --deny-* carve-outs can read, write, execute, or FFI-load a protected file by referring to it with an alternate spelling (NFD vs NFC, case folding, ligatures, or German ss vs ß). No public exploit identified at time of analysis, and EPSS is low (0.14%), but the bypass is trivial to perform once an attacker controls the path string.
Cross-site scripting (XSS) in GitLab CE/EE versions 18.10.0-18.10.3 and 18.11.0 enables unauthenticated attackers to execute arbitrary JavaScript in victim browser sessions via improper path validation. GitLab disclosed this vulnerability with publicly available exploit code (HackerOne report 3572231), though CISA SSVC indicates no active exploitation confirmed at time of analysis. CVSS 8.0 reflects the changed scope (S:C) allowing impact beyond the vulnerable component, though High attack complexity (AC:H) and required user interaction (UI:R) limit ease of exploitation. Patched in versions 18.10.4 and 18.11.1.
Access control bypass in Syncplify Server! before 8.8.0 allows authenticated SFTP users to evade per-path permission overrides by addressing a protected directory with alternate capitalization or its 8.3 short name, enabling file uploads and downloads the override is meant to deny. The flaw is conditional on an existing deny override and on filesystem behavior that accepts alternate case or short names, such as Windows/NTFS; on strictly case-sensitive filesystems without short-name generation the technique is limited. No public exploit was identified at time of analysis, and the vendor has released 8.8.0 as the fix.
Remote code execution in Microsoft Windows WebDAV lets a low-privileged, authenticated attacker reach the code-execution path over the network by exploiting improper resolution of path equivalence (CWE-41), yielding high confidentiality, integrity and availability impact (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 8.8). The flaw spans supported Windows client and server releases from Windows 10 1607 and Windows Server 2012 through Windows 11 26H2 and Windows Server 2025, but only where the WebDAV/WebClient capability is enabled and network-reachable, since that service is not on by default across all SKUs and exploitation requires an existing low-privileged account. There is no public exploit code and no confirmed active exploitation at time of analysis (CISA SSVC exploitation: none); vendor patches that lift the affected builds above the enclosed fix levels are available from Microsoft. Note that source tagging labels this issue Information Disclosure, which understates the assessed code-execution impact.
Local privilege escalation in Microsoft's Windows Backup Engine (CWE-41, path equivalence mis-resolution) allows an authenticated, low-privileged attacker with local access to a Windows host to gain elevated privileges by manipulating a path that the Backup Engine resolves to an equivalent but attacker-controlled location; exploitation requires no user interaction (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, 7.8). The attack surface is confined to hosts where an attacker already holds an unprivileged foothold, making multi-user systems, shared workstations, and terminal/RDP-style environments the realistic risk scenario rather than remote perimeter exposure. Microsoft has published fixed builds through the MSRC update guide, and no public exploit identified at time of analysis - no confirmed actively exploited (CISA KEV) status and no publicly available exploit code exists, so this is a credible but not emergency-tier patch-cycle priority.
Improper path-equivalence handling in Microsoft Windows SmartScreen allows an unauthenticated, remote attacker to bypass the reputation/Mark-of-the-Web check so that a crafted file runs without the expected SmartScreen warning, provided the victim opens it (user interaction required, CVSS 8.8). Only unpatched Windows 11 builds are affected - 24H2 before 10.0.26100.9711, 25H2 before 10.0.26200.9711, 26H1 before 10.0.28000.3231, and 26H2 before 10.0.26300.9711; no public exploit code has been identified at time of analysis, and CISA's SSVC assessment records exploitation as 'none' and not automatable, so urgency signals conflict between the high CVSS score and total technical impact and the absence of observed or automated exploitation. A vendor patch is available and should be applied through the normal Windows update channel.
Improper resolution of path equivalence (CWE-41) in Visual Studio Code allows an unauthenticated local attacker to bypass a security feature, likely Workspace Trust or restricted mode, by convincing a victim to open and interact with a crafted workspace or folder. The vulnerability requires user interaction and high attack complexity, and while it has a CVSS score of 7.7 (High), it is a moderate-priority developer-workstation issue rather than an internet-facing emergency. No public exploit code has been identified at time of analysis, and the exact affected versions should be confirmed via the linked Microsoft advisory.
Authenticated privilege escalation in Microsoft WebDAV lets a low-privileged network user bypass authorization by supplying an alternate but equivalent path representation, causing access-control checks to be evaluated against the wrong canonical path; successful exploitation yields high confidentiality, integrity, and availability impact (CVSS 8.8, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Exploitation requires an existing authorized account on the target plus network reach to the WebDAV service - it is not exploitable by a fully unauthenticated attacker - but needs no user interaction and has low attack complexity. At time of analysis there is no confirmed active exploitation (not in CISA KEV) and no public exploit code identified; patch availability was not specified in the provided intelligence and should be confirmed against the Microsoft MSRC advisory.
MCPVault, a lightweight Model Context Protocol server that exposes Obsidian vault files to AI agents, fails to block access to restricted directories such as .git, .obsidian, and node_modules in versions prior to 0.11.4. PathFilter compiles its deny-list patterns case-sensitively and matches raw path segments, so on case-insensitive macOS and Windows filesystems variants like .Git/config or .GIT/config (and on Windows, trailing-dot/space forms such as .git./config) pass both isAllowed() and isAllowedForListing() while the operating system still opens the real restricted directory. An attacker who can influence a path selected by an AI agent can then read, write, move, search, or list sensitive repository and Obsidian metadata; no public exploit code or CISA KEV entry was identified at time of analysis.
Path canonicalization bypass in filebrowser before v2.63.21 permits authenticated users to circumvent administrator-configured deny rules by submitting case-variant or backslash-delimited path representations that the access rule engine fails to normalize before evaluation. The filesystem resolves these alternate representations to the same restricted objects, but the rules engine never matches them, effectively granting access to files the administrator explicitly intended to block. No public exploit code has been identified at time of analysis, though the attack concept is well-understood and straightforward to implement for any authenticated user of an affected deployment.
Permission-sandbox bypass in the Deno runtime (versions <= 2.7.13) on macOS lets untrusted code reach paths that operators explicitly blocked with --deny-read, --deny-write, --deny-run, or --deny-ffi. Because Deno compared paths byte-for-byte while APFS treats Unicode-equivalent and case-equivalent spellings as the same file, a script granted broad --allow-* but with --deny-* carve-outs can read, write, execute, or FFI-load a protected file by referring to it with an alternate spelling (NFD vs NFC, case folding, ligatures, or German ss vs ß). No public exploit identified at time of analysis, and EPSS is low (0.14%), but the bypass is trivial to perform once an attacker controls the path string.
Cross-site scripting (XSS) in GitLab CE/EE versions 18.10.0-18.10.3 and 18.11.0 enables unauthenticated attackers to execute arbitrary JavaScript in victim browser sessions via improper path validation. GitLab disclosed this vulnerability with publicly available exploit code (HackerOne report 3572231), though CISA SSVC indicates no active exploitation confirmed at time of analysis. CVSS 8.0 reflects the changed scope (S:C) allowing impact beyond the vulnerable component, though High attack complexity (AC:H) and required user interaction (UI:R) limit ease of exploitation. Patched in versions 18.10.4 and 18.11.1.