Path Traversal
Monthly
Authenticated path traversal in the file upload functionality of TP-Link Archer MR600 (v2, v3, v5) and TL-MR6400 v8 allows an admin-level remote attacker to write files outside the intended upload directory, potentially overwriting system files accessible to the affected service. The vendor explicitly states that arbitrary code execution has not been demonstrated, making this an integrity-limited vulnerability rather than a full RCE. Vendor-released firmware patches are available for both affected product lines. No public exploit has been identified at time of analysis.
Path traversal in rclone prior to 1.75.1 allows an attacker who can populate a source object store with raw `..` key segments to cause rclone to write files outside the configured destination root when a victim performs a copy or sync operation. Thirteen destination backends - including b2, swift, sftp, smb, webdav, ftp, storj, and others - are affected because they apply path.Join(root, remote) on unvalidated object keys before EncodeDot can neutralize parent-directory segments; sftp and smb destinations carry the highest impact since they can reach other filesystem paths or shares accessible under the victim's credential. No public exploit code has been identified and the issue is fixed in v1.75.1.
Path traversal (Zip Slip class) in rclone's archive ZIP backend permits arbitrary file writes outside the intended destination directory when processing a malicious ZIP archive. Versions 1.72.0 through 1.75.0 are affected: the readZip function in backend/archive/zip/zip.go trusts central directory filenames from untrusted ZIP sources without confining path.Clean output to the archive namespace, allowing entries like ../../etc/cron.d/evil to propagate as Object.Remote() values and be written by fs/sync and fs/operations to attacker-chosen filesystem locations. A separate bug used strings.HasPrefix without a path separator, causing root 'foo' to incorrectly match sibling entries named 'foobar'. Vendor-released patch is available in version 1.75.1; no public exploit identified at time of analysis.
Directory traversal in knowns through 0.33.0 exposes arbitrary host filesystem paths to unauthenticated remote attackers via the workspace browse endpoint's unsanitized `path` query parameter. Attackers can walk the directory tree to map project directories, configuration file locations, and other filesystem structures without any credentials or special privileges. No public exploit has been identified at time of analysis, and impact is bounded to directory enumeration - file content cannot be read through this vector alone.
Path traversal in the Youzify WordPress plugin (versions ≤ 1.3.7) allows any authenticated subscriber to download arbitrary files from the hosting server. The flaw stems from insufficient sanitization of user-supplied file path input (CWE-22), enabling directory traversal sequences to escape the intended download scope. An attacker with a low-privilege WordPress account can retrieve sensitive server files - including wp-config.php containing database credentials - with no public exploit identified at time of analysis.
Path traversal in the import_contacts function of the Groundhogg WordPress CRM plugin (versions ≤ 4.7.1) allows authenticated low-privilege users to read arbitrary files from the web server by supplying directory traversal sequences in a file path parameter. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) confirms the flaw is network-exploitable with no complexity or interaction requirements beyond holding a basic WordPress account. Because WordPress plugins execute in the web server process context, the most critical exposure is likely reading wp-config.php, which contains database credentials and secret keys, enabling secondary attacks well beyond the medium 6.5 base score.
Path traversal in proma-ai Proma's Electron File Preview Service (versions up to 0.19.37) allows a locally authenticated low-privilege user to escape intended base directories by manipulating the file_path argument passed to resolveTargetPath in file-preview-service.ts. The root cause is a basename-collision fallback that resolves relative traversal sequences outside the allowed candidate base paths, enabling unauthorized reads and potential writes to files accessible by the Electron main process. A public proof-of-concept exists, though it targets the v0.16.3 IPC API and requires adaptation for subsequent pre-fix versions; the underlying vulnerability is confirmed in source code.
Path traversal in JoomShaper's SP Property Joomla extension (all versions before 4.1.4) allows unauthenticated remote attackers to escape the intended gallery directory due to missing directory confinement checks in the gallery management controller tasks. The CVSS 4.0 vector (PR:N, UI:N, AV:N) confirms exploitation requires no privileges or user interaction, though impact is constrained to low-severity integrity and availability effects on both the vulnerable and subsequent systems with no confidentiality exposure. No public exploit or active exploitation has been identified at time of analysis.
Directory traversal in WP BackItUp Community Edition (WordPress plugin) ≤2.1.0 allows authenticated administrators to read the contents of arbitrary existing files on the server via the backup_file parameter in the download handler. The handler applies basename() normalization only when the traversal target path does not exist - meaning any real file, including wp-config.php or OS credential files, is returned without sanitization. No public exploit code has been identified at time of analysis, and the PR:H requirement limits the exploitable attack surface to accounts with WordPress administrator privileges or higher.
Path traversal in GitHacker ≤1.1.7 allows a malicious git server to coerce the tool into reading arbitrary files from the victim's local filesystem via an unsanitized `ref:` value in a crafted `.git/HEAD`. The exploitable primitive is narrower than full arbitrary file-read: the recovery loop converts every 40-character hex substring in any accessed file into an outbound HTTP GET back to the attacker's server, yielding an existence oracle for arbitrary paths and hex-fragment exfiltration for files containing cryptographic material such as password hashes, HMAC-SHA1 outputs, or SSH key fingerprints. Exploitation requires the victim to actively run GitHacker against an attacker-controlled URL; no public exploit code has been identified at time of analysis, and a vendor-released patch is available as version 1.1.8.
Path traversal in LF Edge eKuiper's plugin installation endpoint (POST /plugins/*) allows high-privileged management API users to delete arbitrary files and directories on the host by embedding traversal sequences such as `../../` in the plugin `name` parameter. Affected versions are all eKuiper releases prior to 2.4.1 (Go module github.com/lf-edge/ekuiper/v2). A proof-of-concept is published in the GitHub security advisory GHSA-c23q-fw86-9h5x, demonstrating deletion of arbitrary host paths via `os.RemoveAll`; the advisory explicitly confirms exploitation is bounded to file deletion only - no code execution, file creation, or data exfiltration is achievable.
Relative path traversal (CWE-23) in Dell Secure Connect Gateway 5.0 allows unauthenticated remote attackers to access the underlying filesystem of the appliance or application deployment without credentials. Both form factors - the dedicated Appliance (prior to 5.36.00.16) and the software Application (prior to 5.36.00.00) - are affected. Successful exploitation yields limited file read access (C:L) and high-impact file write capability to arbitrary filesystem locations (I:H), creating conditions for persistent configuration tampering or malicious file placement on a security-adjacent platform. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Path traversal in the key provider component of Red Hat Build of Keycloak allows a realm administrator to probe arbitrary filesystem paths by supplying crafted keystore parameters, revealing the existence and readability of server-side files. The vulnerability exists because a prior fix for path probing was incomplete, leaving a residual bypass in the keycloak-services library - the core engine shared by both Red Hat Build of Keycloak and Red Hat Single Sign-On 7. No public exploit code has been identified at time of analysis, and exploitation requires realm administrator credentials, materially limiting opportunistic attack surface.
Relative path traversal in Ragic Enterprise Cloud Database enables privileged remote attackers to read arbitrary files from the underlying server filesystem. Exploitation requires high-privilege authenticated access (PR:H per the CVSS 4.0 vector AV:N/AC:L/AT:N/PR:H), meaning an attacker must first hold or compromise an elevated account within the platform before leveraging the traversal to exfiltrate sensitive system files. No active exploitation (CISA KEV) or public exploit code has been identified at time of analysis; the vulnerability was disclosed via TWCERT advisories.
Path traversal in Samsung's GalaxyDiagnostics component on Samsung Mobile Devices allows a physical attacker to access files with system-level privilege, affecting Android versions 14 through 17 prior to the SMR Sep-2026 Release 1 patch. The CVSS 4.0 vector (AV:P/VC:H/VI:H) confirms both high confidentiality and integrity impact but constrains exploitation to physical presence at the device. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Path traversal in Tanium Data Service 4.2 prior to build 4.2.345 allows a highly privileged, remote-authenticated attacker to read, write, or otherwise manipulate files outside the application's intended directory scope. Tanium addressed this in their security advisory TAN-2026-044 with a patch to build 4.2.345. No public exploit or active exploitation has been identified at time of analysis.
Path traversal in n8n's Git node allows authenticated workflow editors to exfiltrate the contents of arbitrary local git repositories readable by the n8n process. The flaw exists in `packages/nodes-base/nodes/Git/GenericFunctions.ts`: `setUpstream` writes an unvalidated `branch.<branch>.remote` value into the repository configuration, and a subsequent `fetch` or `pull` resolves the remote from that persisted config rather than the validated `repository` parameter - a TOCTOU-style validation bypass classified as CWE-22. No public exploit has been identified at time of analysis; vendor-released patches are available in versions 1.123.76, 2.37.7, and 2.38.2.
Path traversal in n8n's Elasticsearch and ElasticSecurity workflow nodes allows a low-privileged workflow editor to escape the intended Elasticsearch index scope and reach arbitrary indices or cluster administration endpoints using the platform's stored Elasticsearch credentials. Exploitation requires the ability to create or edit workflows containing Elasticsearch nodes, and the root cause is the absence of proper URL path-segment encoding (toPathSegment) in GenericFunctions.ts before identifiers are interpolated into REST request paths. No public exploit code or CISA KEV listing is present at time of analysis, but the scope change to a backend Elasticsearch cluster elevates the real-world impact beyond the CVSS base score suggests.
Path traversal in Okta Access Gateway's backup restore function (all versions prior to 2026.9.1) allows an authenticated administrator to supply a crafted encrypted backup payload containing a malicious embedded filename, causing the appliance to write file contents to arbitrary locations on its filesystem. Exploitation requires high-privilege administrative access (CVSS PR:H), materially limiting the attacker population to those who have already compromised gateway admin credentials. No public exploit code exists and the vulnerability is not listed in the CISA KEV catalog; a vendor-released patch is available at version 2026.9.1.
Path traversal in Visual Studio Code (all versions prior to 1.136.2) allows a remote unauthenticated attacker to write files outside the intended restricted directory, achieving high-integrity tampering on the victim's system over a network. The attack requires user interaction - a victim must open or process attacker-controlled content within VS Code - which limits automatability. No active exploitation has been identified; SSVC assessment confirms exploitation status as none with partial technical impact. Microsoft has released a fix in version 1.136.2.
Path traversal in Adobe Photoshop Mobile for Android (≤1.6.0.2294 and ≤1.6.0.2299) enables a low-privileged attacker to cause a security feature bypass, reading unauthorized files or directories outside the app's intended sandbox and producing high availability impact when a victim opens a maliciously crafted Photoshop document. The CVSS 3.1 score of 5.0 captures the meaningful constraints: local attack vector, high complexity, required user interaction, and the fact that exploitation depends on conditions beyond the attacker's control. No active exploitation (CISA KEV) and no public exploit code have been identified at time of analysis.
Privilege escalation via relative path traversal (CWE-23) affects the Windows DNS Server service across a broad range of Windows Server releases from 2012 through 2025. An authorized local attacker holding high-privilege access can manipulate relative path sequences in the DNS service to reference files or system resources outside the intended directory scope, resulting in full Confidentiality, Integrity, and Availability impact through SYSTEM-level privilege escalation. Microsoft has released patches across all affected builds; no public exploit code or CISA KEV listing has been identified at time of analysis.
Windows Defender Firewall Service on a broad range of Windows client and server editions exposes protected files or directories to low-privileged local attackers (CWE-552), enabling sensitive information disclosure. A local attacker holding a standard user account can access firewall service files - potentially including policy configuration, rule data, or service-level secrets - that should be restricted to privileged processes. Microsoft has released patches across the full affected version range; no public exploit has been identified at the time of analysis.
Path traversal in Windows PowerShell (CWE-22) enables network-based security feature bypass across virtually all supported Windows releases, from Server 2012 through Windows Server 2025 and Windows 11 26H2. The flaw allows an unauthenticated remote attacker - contingent on user interaction - to write files outside a restricted directory, circumventing a Windows security boundary with high integrity impact and no direct confidentiality or availability consequence. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified at time of analysis, though the broad affected surface across all major Windows versions warrants prompt patching.
Path traversal in the gnome-tweaks shell theme installer allows a local attacker who can persuade a user to install a crafted ZIP-packaged theme to write arbitrary files outside the intended ~/.themes directory. The flaw - a classic "zip slip" pattern (CWE-22) - exploits the absence of archive-member-path validation: malicious archives can embed ../ sequences, absolute paths, or symlink entries to redirect file writes anywhere the victim user can write. With user-level write access this can overwrite shell startup scripts, SSH authorized_keys, or desktop autostart entries, escalating to persistent code execution under the victim's account. No public exploit code or KEV listing exists at time of analysis; EPSS data was not provided.
Directory traversal in JoomUnited's WP File Download WordPress plugin (all versions through 6.3.8) enables server-side file disclosure via a two-stage attack chain. A subscriber-level authenticated attacker first poisons a post-meta value through an unprotected file.save handler, after which the plugin's streaming endpoint — registered on WordPress's init hook with no authentication check — resolves and serves the traversed file path to any HTTP caller, including fully unauthenticated visitors. No public exploit code or CISA KEV listing has been identified at time of analysis, but Wordfence has published the vulnerability details and a trac browser link pointing directly to the vulnerable code at app/site/init.php line 225.
Local file inclusion in Eventin WordPress plugin before 4.1.21 enables authenticated contributors and higher-privileged users to include and execute arbitrary PHP files on the web server. The plugin fails to validate a user-supplied template path parameter before passing it to a PHP file-inclusion routine, allowing path traversal to any locally accessible PHP file. A publicly available proof-of-concept has been published by WPScan; vendor patch 4.1.21 is available and should be applied immediately.
Path traversal in the JCH Optimize WordPress plugin (versions before 5.0.1) permits authenticated administrators - including sub-site administrators on WordPress multisite installations - to enumerate directories and file names outside the web root via an unsanitized path parameter in the plugin's administrative image-browsing feature. A public proof-of-concept is available through WPScan, though SSVC confirms no active exploitation and EPSS sits at the 5th percentile. Real-world impact is confined to confidentiality of filesystem structure: attackers can map server directory layouts and file names but cannot read file contents or modify data.
Zip-slip path traversal in Emlog versions 2.6.29 and prior allows authenticated administrators to overwrite arbitrary server-side files, including config.php, achieving remote code execution. The emUnZip() function passes attacker-supplied ZIP archives to ZipArchive::extractTo() without sanitizing path components across all entries - only the first entry's subdirectory is inspected, leaving all subsequent entries unchecked. No publicly known patch exists at time of publication, making this an unmitigated risk for all deployed instances.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.10.2 allows an authenticated low-privileged attacker to read arbitrary files on the underlying server by injecting dot-dot sequences (/../) into crafted URL requests. The CVSS 3.1 score of 6.5 (C:H/I:N/A:N) reflects a read-only disclosure vector with no write or denial-of-service capability, but the confidentiality impact is materially significant given that Langflow deployments commonly store LLM API keys, pipeline configurations, and model secrets on the host filesystem. No public exploit code or CISA KEV listing has been identified; IBM has released a patch via its support portal.
Path traversal in IBM Langflow OSS 1.0.0-1.10.2 permits authenticated remote attackers to read arbitrary files on the underlying server by embedding dot-dot sequences (/../) in crafted URL requests. The vulnerability (CWE-22) exposes any file readable by the application process, potentially including configuration files, credentials, private keys, and other sensitive data. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch.
Path traversal in IBM Langflow OSS 1.0.0 through 1.10.2 exposes arbitrary server-side files to authenticated remote attackers, yielding high confidentiality impact with no integrity or availability loss. The CWE-22 flaw stems from insufficient restriction of user-supplied pathnames, allowing traversal sequences to escape the intended directory boundary. IBM self-reported and patched this issue; no public exploit or active exploitation has been identified at time of analysis.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.11.2 enables authenticated remote attackers to read arbitrary files accessible to the Langflow process, potentially exposing configuration data, credentials, or other sensitive server-side content. The CVSS vector (PR:L) confirms that prior authentication is required, moderating real-world risk relative to unauthenticated flaws. IBM has released a patch, the vulnerability is vendor-reported, and no public exploit or active exploitation has been identified at time of analysis.
Sensitive file disclosure in IBM Langflow OSS 1.0.0 through 1.11.2 allows authenticated remote attackers to read arbitrary files on the server by exploiting improper validation of symbolic links. The flaw, classified under CWE-22 (Path Traversal), enables an attacker with valid credentials to escape intended directory boundaries by manipulating symlink resolution, potentially exposing configuration files, credentials, or other sensitive server-side content. IBM has released a patch via their support advisory; no public exploit code or active exploitation has been identified at time of analysis.
Arbitrary file write in IBM Langflow OSS 1.0.0-1.11.2 allows low-privileged authenticated attackers to plant files at any server-writable path via the SaveToFileComponent's unsanitized path handling on the /api/v1/run/{flow_id} endpoint. The root cause is CWE-22 path traversal: user-supplied path values-including absolute paths and traversal sequences such as ../../-are incorporated into local filesystem operations without sufficient sanitization. Successful exploitation enables unauthorized file creation or modification, with potential for further compromise (e.g., overwriting application scripts or configuration) depending on the Langflow process's file-system permissions. No public exploit code or CISA KEV listing has been identified at time of analysis.
Path traversal in GFI Exinda AI before 7.6.5 allows an authenticated administrator to read arbitrary files from the underlying system as root. The vulnerability resides in the wcf_handle_download() function within the system maintenance configuration download handler, which fails to sanitize directory traversal sequences embedded in parameters prefixed with v_del_ before appending them to the base configuration directory path. No public exploit code or active exploitation has been identified at the time of analysis, and exploitation is constrained to Admin-privileged accounts.
Arbitrary file-write via path traversal in WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 allows authenticated administrators to place files of permitted types at any writable server path, including locations outside the WordPress installation root. The vulnerability stems from unsanitized user-supplied filenames used directly in write-path construction (CWE-22), with scope change (S:C) confirmed by the vendor CVSS vector. A publicly available proof-of-concept exists, and a patched release (0.9.134) has been issued; no active exploitation (CISA KEV) has been reported at time of analysis.
Arbitrary file read in the Pods WordPress plugin before 3.3.9.2 allows users holding the Author role or higher to exfiltrate any file accessible to the web server process, including sensitive files outside the web root such as wp-config.php or system credentials. The flaw stems from the plugin's display callback resolver accepting unrestricted PHP callable targets without allowlisting. A publicly available proof-of-concept exists per WPScan, and a vendor patch is available. The attack surface is limited to installations operating in restricted display-callback mode, which is the automatic default for WordPress sites whose initial Pods installation predated version 3.1.
Path traversal in Eleveo Quality Management 9.7.0 allows authenticated remote attackers to escape the intended export directory by supplying crafted directory traversal sequences in the `file_name` argument of the `QuestionnaireService.runDataExportNow` function, enabling unauthorized file read and write operations on the server. A public proof-of-concept exploit is available via Google Drive, lowering the barrier to exploitation. The vendor did not respond to the researcher's disclosure, and no patch has been released.
Arbitrary file read in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows any authenticated user holding only the low-privileged Standard role to retrieve arbitrary files from the device filesystem by manipulating the `file` query string parameter of `/cgi-bin/ugwdownload.cgi`. A public proof-of-concept exploit is available in SilviaMun's vulnerability-research repository on GitHub, significantly lowering the skill threshold for exploitation. No integrity or availability impact is established - this is a confidentiality-only vulnerability with high impact on device-resident sensitive data such as configuration files and credentials.
Path traversal in MOOS-IvP SplitHandler (through version 24.8.1) allows an attacker who supplies a crafted alog file to write files outside the intended split output directory on Windows systems. By embedding backslash sequences in variable names within the alog file, the inadequate prior sanitization - which only replaced forward slashes - can be bypassed to escape the output directory boundary and append to arbitrary files. A vendor patch is available via PR#137; no public exploit or KEV listing has been identified at time of analysis.
Path traversal in parsedmarc 9.0.6 through 11.0.0 allows a network attacker who can send email to a monitored mailbox to write attacker-controlled files outside the intended samples directory. The flaw lives in save_output(), which names forensic failure report samples after the email Subject header but falls back to the raw unsanitized Subject when sanitization yields an empty string - which occurs whenever the Subject consists entirely of path separators or dots such as '../../../'. The attacker-supplied email body is then written as a dot-prefixed .eml file to an ancestor directory of the configured samples path. No public exploit identified at time of analysis; exploitation additionally requires the --output flag to be enabled.
Windows openvpnserv path-validation bypass in OpenVPN 2.7_alpha1 through 2.7.6 allows a low-privileged local user to circumvent administrative config-path restrictions by using '/' instead of '\' as a directory separator. Windows path-validation APIs do not recognize '/' as a separator while file-open APIs do, creating a mismatch exploitable to load a user-controlled OpenVPN config file that administrators have explicitly prohibited. Fixed in v2.7.7; no public exploit identified at time of analysis.
Path traversal in OpenList prior to v4.2.3 allows any authenticated user holding the PermAddOfflineDownload permission to write, truncate, or overwrite arbitrary files accessible to the OpenList process via the SimpleHttp offline-download tool. The attacker controls a remote HTTP server that returns a crafted Content-Disposition header containing path-traversal sequences; OpenList uses the attacker-supplied filename without containment validation to construct a file path via filepath.Join relative to a per-task temporary directory, allowing traversal outside that directory. No public exploit has been identified at time of analysis, though the GHSA advisory details the exact vulnerable function and the fix commit is publicly accessible, significantly lowering the effort required to develop one.
Path traversal in Reader Tools PDF Reader App 98.8 on Android permits a local low-privileged attacker to manipulate the `_display_name` parameter supplied via a deep link to the `ActSplashNew.handleDeeplink` function, enabling file reads or writes outside the application's intended sandbox. The affected CPE (`cpe:2.3:a:reader_tools:pdf_reader_app`) covers version 98.8 on Android; the vendor did not respond to the coordinated disclosure, and no patch has been released. A public proof-of-concept exploit exists, but real-world impact is bounded by the local-only attack vector and low individual component impacts.
Path traversal in Kibana's Fleet feature enables a low-privileged user to manipulate Fleet administration actions taken by higher-privileged users, causing those actions to target unintended resources - including deleting accounts with elevated privileges. The attack exploits a confused-deputy pattern (CWE-22/CAPEC-126): the attacker crafts a traversal payload through their low-privileged access, then waits for an admin to perform a routine Fleet operation, at which point the admin's elevated context executes the deletion against the attacker-controlled target. Fixed versions are Kibana 8.19.17, 9.3.6, and 9.4.3 per the Elastic security advisory ESA-2026-159. No public exploit or CISA KEV listing is present at time of analysis.
Path traversal in Kibana's Fleet feature enables a low-privileged user with Fleet write access to craft resource paths that redirect a subsequent administrative delete operation onto unintended internal Kibana resources, causing unauthorized data destruction. Affected versions are Kibana prior to 8.19.18 and 9.4.3; Elastic released fixes for both branches under ESA-2026-157. No public exploit code or active exploitation has been identified at time of analysis, but the two-actor attack pattern (attacker plants, admin triggers) meaningfully constrains real-world exploitability.
Path traversal in Elastic Maps Server exposes arbitrary files readable by the server process to unauthenticated network attackers. Insufficient path restriction in the content-directory serving logic allows crafted requests to escape the intended directory using traversal sequences, returning sensitive file contents. No KEV listing or public exploit code exists at time of analysis; Elastic has released fixed versions 8.19.19, 9.4.4, and 9.5.1 per advisory ESA-2026-148.
Memory saved. Analysis complete. Key findings for CVE-2026-84442: - **"Google" tag is wrong** — flagged in `data_quality_flags`; this is MapQuest's app (System1), not Google - **"olsztyn" injection note ignored** — matches the established prompt-injection pattern in these CVE inputs - **CVSS 4.0 score of 4.8 is well-calibrated** — local-only, low-privilege, limited impact (VI:L/VA:L/VC:N); no inflation concerns - **No vendor patch** — MapQuest did not respond to disclosure; PoC is public - **VC:N is slightly unexpected** for a path traversal (read access is a common consequence), noted in `confidence_notes` for follow-up review
Path traversal in Piwigo's Image Derivative Handler (i.php) exposes arbitrary server-side files to remote unauthenticated attackers on installations up to version 16.3.0. The CVSS 4.0 vector confirms network-accessible, zero-authentication exploitation with low confidentiality and integrity impact, consistent with a traversal primitive that can both read and potentially write files in unanticipated filesystem locations. A public proof-of-concept titled 'unauthenticated_derivative_path_traversal' is available on GitHub, materially lowering the bar for exploitation; no active exploitation has been confirmed in CISA KEV at time of analysis.
Path traversal in AirAsia MOVE App for Android (versions up to 12.47.1) allows a locally present low-privileged attacker to escape intended directory boundaries via unsanitized handling of the `_display_name` argument inside `com.airasia.core.utils.RealPathUtil.getRealPath`. Exploitation yields limited integrity and availability impact constrained by Android's SELinux sandbox, with no confidentiality exposure. A public proof-of-concept document exists; the vendor did not respond to coordinated disclosure, and no patch has been released.
Path traversal in WWBN AVideo's unauthenticated `get_api_login_code` API endpoint enables remote attackers to delete arbitrary `.log` files and enumerate filesystem paths by injecting directory traversal sequences into the `code` parameter. All versions covered by CPE `cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*` are affected, with exploitation requiring no authentication or user interaction. The primary security consequence is destruction of audit trails and access logs, which undermines incident detection and forensic response capabilities; no public exploit code has been identified at time of analysis.
Path traversal in Vitest's interceptorPlugin exposes local files on any development server with a network-accessible HMR WebSocket. The `vitest:interceptor:register` handler in `packages/mocker/src/node/interceptorPlugin.ts` accepts redirect mock registrations over Vite's unauthenticated HMR socket without calling `isFileLoadingAllowed()`, allowing a remote unauthenticated attacker who can reach the dev server to submit opaque-scheme URLs (e.g., `traversal:../../../etc/passwd`) whose `..` segments survive `URL.pathname` parsing and resolve outside the project root via `path.join()`. The plugin's `load` hook then returns `readFile(mock.redirect, 'utf-8')` as JavaScript module source, disclosing any file readable by the dev-server process. No public exploit or CISA KEV listing has been identified, but the GitHub fix PR includes a complete, working e2e test that serves as a functional PoC.
Authenticated path traversal in HPE AOS-CX's web-based management interface permits a low-privileged authenticated attacker to read arbitrary files from the underlying operating system, potentially exposing credentials, private keys, and device configuration data. The CVSS vector (AV:N/AC:L/PR:L) confirms the vulnerability is remotely exploitable with minimal complexity once valid credentials are obtained. This CVE is part of a broader HPE security advisory (hpesbnw05134) covering multiple AOS-CX vulnerabilities, including higher-severity unauthenticated RCE issues, making credential exposure via this flaw a plausible stepping-stone in a multi-stage attack chain. No public exploit identified at time of analysis.
Path traversal in Hono's toSSG() static site generator allows untrusted ssgParams values - such as slugs sourced from a CMS, external API, or user submission - to create or overwrite files outside the configured output directory at build time. Versions 4.12.12 through 4.13.4 are affected; the root cause is an incomplete fix for CVE-2026-39408 that fails to collapse consecutive parent-directory segments (e.g., 'a/b/../../../') in route parameter values, and also mishandles Windows drive-relative and UNC path roots. No public exploit has been identified and the vulnerability is not confirmed in the CISA KEV catalog; a complete patch is available in v4.13.5.
Path traversal in HPE Networking Fabric Composer's API endpoint allows an unauthenticated adjacent attacker to manipulate user-generated files and potentially alter critical system configurations. Exploitation is constrained by the AV:A vector (attacker must be on the same network segment), high attack complexity requiring preconditions outside the attacker's control, and mandatory user interaction - factors that collectively reduce the practical risk below the I:H integrity impact might suggest. No public exploit code has been identified and the vulnerability is not listed in CISA KEV. The CVSS base score of 4.8 reflects these limiting conditions accurately.
Unauthenticated file read in HPE Networking Fabric Composer's web-based management interface exposes a subset of system files to remote attackers without requiring any credentials. The vulnerability is confined to files within a specific affected directory rather than offering arbitrary filesystem access, yielding a limited confidentiality impact consistent with the CVSS 5.3 (C:L) score. No active exploitation (KEV) or public proof-of-concept has been identified at time of analysis, and no EPSS signal is provided in available intelligence.
Authenticated privilege escalation in HPE Networking Fabric Composer's API allows low-privilege operator users to read limited information and make limited configuration changes beyond their authorized scope. The flaw affects all tracked versions per CPE data and requires only a valid low-privilege account to exploit - no special configuration or user interaction is needed. No public exploit code and no CISA KEV listing are present at time of analysis, keeping real-world risk moderate despite network accessibility.
Path traversal in appium-mcp-server through 0.1.61 allows any caller of the write_file or write_files_batch MCP tools to overwrite arbitrary files on the host system by supplying absolute paths or parent-directory sequences (../) that escape the intended PROJECT_ROOT boundary. The server user's full filesystem write permissions are exposed, enabling an attacker to corrupt shell profiles, inject cron jobs, or overwrite application configuration files. No public exploit has been identified at time of analysis, but the vulnerability is trivially exploitable given the absence of any path validation logic in the affected tools.
Path traversal in Sage Employee Self Service's custom logo functionality exposes arbitrary server-side files to unauthenticated remote attackers. The flaw stems from insufficient sanitization of file path parameters, allowing directory traversal sequences and their URL-encoded equivalents to escape the application's intended filesystem scope and read sensitive data such as configuration files, environment settings, and logs. No public exploit or CISA KEV listing is present; Sage has remediated the issue via enhanced path validation shipped in the Q2 2026 HRMS product update.
Path traversal in Kirby CMS's filesystem containment logic allows remote unauthenticated attackers to access image files in PHP-readable sibling directories that share a string prefix with the Kirby installation root, and to create thumbnails from those files via the media handler. Versions prior to 4.9.5 (4.x line) and 5.5.2 (5.x line) are affected, with the impact limited to subsequent-system confidentiality exposure - staging sites, backups, or co-hosted internal sites - rather than the Kirby instance itself. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog; the CVSS 4.0 AT:P metric confirms specific environmental preconditions must exist for exploitation.
Path traversal in MCPHub's MCPB file upload handler, prior to version 0.12.13, enables a remote attacker to extract files to arbitrary filesystem locations and delete arbitrary directories on the host by embedding traversal sequences in a crafted archive manifest. The vulnerability exists at `src/controllers/mcpbController.ts:107`, where `manifest.name` is unsanitized before concatenation into `fs.mkdirSync` and `fs.renameSync` calls; the same unsanitized value flows into `cleanupOldMcpbServer` at line 110, enabling directory deletion. No public exploit code or CISA KEV listing has been identified at time of analysis, though the full source-level disclosure in the GHSA advisory makes weaponization straightforward.
Path traversal in yaojingang GEOFlow's Image Library Cleanup component allows remote authenticated administrators to delete arbitrary server files by supplying crafted directory-traversal sequences in the `file_path` argument to the PHP `unlink()` function within `ImageLibraryController.php`. All versions up to 2.1.0 are affected (CPE: cpe:2.3:a:yaojingang:geoflow:*:*:*:*:*:*:*:*), with a publicly available proof-of-concept on GitHub issue #60. No CISA KEV listing exists, and the admin-only requirement (PR:H per CVSS 4.0) constrains real-world impact, but the public POC makes patching urgent for any exposed instance.
Path traversal in SeaCMS up to version 13.6 enables authenticated remote attackers to delete arbitrary files by injecting directory traversal sequences into the `itype` or `vid` parameters of the Comment Cache deletion endpoint `/member.php?action=del_pl`. A public proof-of-concept exploit is documented in a GitHub security advisory, lowering the barrier to exploitation. While not confirmed in CISA KEV, the combination of network reachability, low privilege requirement, and public POC elevates practical risk for exposed SeaCMS deployments beyond what the medium CVSS score alone suggests.
Arbitrary file deletion in SeaCMS up to version 13.6 is achievable by authenticated remote users through the Avatar Upload component's password-change handler, where the `oldpic` parameter is passed unsanitized to PHP's `unlink()` function. A publicly available proof-of-concept exploit hosted on GitHub demonstrates the technique against the `/member.php?action=chgpwdsubmit` endpoint, lowering the barrier for exploitation to any account holder. While the CVSS 4.0 score of 2.1 reflects limited impact - file deletion only, no data exfiltration - deletion of configuration, credential, or application files could cascade into more severe outcomes than the base score implies; no public exploit identified at time of analysis has been confirmed as actively exploited (CISA KEV).
CVE-2026-59944 was reported by Ubuntu as the originating vendor source, but no description, CVSS score, CWE, or reference data was supplied for this analysis. The vulnerability type, affected component, and impact cannot be characterized from available intelligence. Security teams should consult the Ubuntu Security Notices portal directly for authoritative details before making any triage or remediation decisions.
Path traversal in Apache Wicket's package resource URL handling exposes files outside the intended package directory to unauthenticated remote attackers, including files under WEB-INF that servlet containers ordinarily protect from direct access. Affected are all releases from 8.0.0 through 8.18.0, 9.0.0 through 9.23.0, and 10.0.0 through 10.10.0. Under default configuration the readable file set is bounded by the SecurePackageResourceGuard's extension allowlist (excluding .xml, .properties, .class), but all configurations unconditionally expose a path-existence oracle usable for reconnaissance, and applications using looser guard configurations can disclose web.xml and other sensitive configuration files. No public exploit identified at time of analysis.
Zip Slip-style path traversal in Admidio's photo ZIP download feature allows authenticated users who hold album-creation rights to embed directory traversal sequences in album names, which are then reflected verbatim as archive entry paths. When a recipient extracts the resulting ZIP, files may be written outside the intended target directory, providing a limited but real filesystem write primitive on the extracting machine. No public exploit code has been identified at time of analysis; the CVSS 4.0 base score of 2.1 reflects the multiple preconditions - authentication, user interaction, and high attack complexity - that constrain real-world exploitability.
Path traversal in SiYuan 3.8.0 allows an authenticated attacker to read arbitrary files within the workspace directory via the POST /api/template/render endpoint, including conf/conf.json, which contains the API token and cookie signing key. The RenderTemplate function enforces only a workspace-boundary check (util.IsAbsPathInWorkspace) but omits the sensitive-path exclusion (refuseToAccess() blocklist) applied by the file API, creating an inconsistency in access controls across API surfaces. The issue is fixed in v3.8.1; no public exploit identified at time of analysis.
Arbitrary file write via path traversal in the WPvivid - Backup, Migration & Staging WordPress plugin (versions before 0.9.133) allows high-privilege WordPress administrators to extract backup archives with traversal sequences that write files outside the designated restore directory. A publicly available proof-of-concept exists per WPScan, though EPSS sits at 0.17% (7th percentile) and CISA KEV lists no active exploitation at time of analysis. Successful exploitation can lead to remote code execution by placing malicious PHP files in web-accessible directories.
Archive symlink traversal in aquaproj/aqua prior to v2.60.1 enables an attacker who controls a tool archive to write arbitrary files outside the extraction directory with the privileges of the user running aqua. The vulnerable combination in `pkg/unarchive/archives.go` - creating a symlink without destination validation, then following it with a regular file write - allows a malicious tar.gz to overwrite files such as shell startup scripts or PATH entries, resulting in user-level code execution. A working PoC is confirmed in GHSA-mf5c-hw34-4hpp; no CISA KEV listing is present and EPSS data is unavailable for this CVE.
Path traversal in Duplicacy's restore function through version 3.2.5 allows arbitrary file writes outside the designated restore directory when a user restores from a compromised or attacker-controlled snapshot repository. Duplicacy fails to sanitize file paths deserialized from snapshot entries, so crafted traversal sequences (e.g., '../../') cause files to be written to any location accessible by the restoring OS user. No public exploit code has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog, but the integrity and availability impact is rated High in the CVSS 4.0 assessment.
Path traversal in houtini-lm (versions up to 2.13.2) allows an authenticated remote user to supply crafted absolute paths to the code_task_files tool, causing the server to read files outside its intended working directory. Because code_task_files forwards file contents directly to the configured LLM endpoint - which may be a remote provider such as OpenRouter - a successful traversal can silently exfiltrate sensitive files (SSH keys, environment files, cloud credentials) off the machine to a third-party service. No public exploit has been identified and the CVE has not been added to the CISA KEV catalog; an upstream fix is available in commit 35d97bca.
Path traversal in iswalle getnote-mcp up to version 1.5.0 allows attackers with low-privilege MCP call access to read arbitrary files from the host filesystem via the upload_image tool's unsanitized image_path parameter. The vulnerable fs.readFileSync call in src/index.ts accepts absolute paths and directory traversal sequences, and critically, the read file is automatically uploaded to a public CDN - making this an arbitrary file read with built-in exfiltration, exposing SSH keys, /etc/passwd, and similar sensitive data. A public exploit exists (GitHub issue #10) and vendor-released patch version 1.5.1 is confirmed available; no CISA KEV listing has been identified.
Path traversal in SiYuan's asset.upload MCP tool before v3.8.1 allows an attacker to exfiltrate arbitrary host files - including SSH keys and credentials - by supplying absolute paths that bypass workspace boundary validation. The attack is delivered via prompt injection against an AI Agent connected to SiYuan's MCP server, meaning exploitation depends on an AI agent processing attacker-controlled content. No public exploit or CISA KEV listing has been identified at time of analysis, but the high confidentiality impact (CVSS 4.0: 6.9) reflects the potential to read any file the SiYuan process can access.
Path traversal in flutter_file_picker's Android implementation (all versions through 10.3.10) allows a malicious Android app on the same device to write arbitrary files into the victim app's internal storage directories. The openFileStream() method in FileUtils.kt constructs file paths using the DISPLAY_NAME value returned by ContentResolver.query() without sanitization, making it trivially exploitable by a crafted ContentProvider that returns filenames containing ../ sequences. No public exploit has been identified at time of analysis; SSVC classifies exploitation as none and the attack is not automatable, keeping real-world risk constrained despite the clear code-level flaw.
Path traversal in MAA-AI MaaMCP (versions up to 1.1.1.dev6+g2e4a41287) allows low-privileged remote users to read or write files outside the intended pipeline directory by supplying crafted path inputs to the save_pipeline and load_pipeline functions in pipeline_tools.py. Publicly available exploit code exists (referenced in GitHub issue #31), though no active exploitation has been confirmed by CISA KEV. The CVSS 4.0 score of 5.1 (Medium) reflects the authentication requirement and limited per-impact severity, but the public POC elevates practical risk above the base score alone.
Path traversal in arben-adm mcp-sequential-thinking versions up to and including 0.5.0 allows remote low-privileged attackers to read or write arbitrary files on the server by supplying unsanitized path sequences to the `import_session` and `export_session` functions in `server.py`. A publicly disclosed proof-of-concept exists (GitHub issue #17), and the fix is available in v0.6.0 via commit 2fad3ee8. The CVE is not listed in CISA KEV, indicating no confirmed mass exploitation, but the public PoC meaningfully elevates practical risk above the moderate CVSS score alone.
Path traversal in RooCodeInc Roo-Code through version 3.51.1 allows remote unauthenticated attackers to read and write files outside the intended working directory by manipulating input processed by the path.resolve function in ApplyPatchTool.ts. The vendor has confirmed they archived the repository and discontinued all support, meaning no patch will ever be released. Publicly available exploit code exists via a GitHub Gist, and no vendor-released patch identified at time of analysis - organizations still running this tool are permanently exposed.
Zip extraction in AWS diagram-as-code (awsdac) versions 0.10 through 0.23 is vulnerable to relative path traversal (CWE-23), enabling a third party to write arbitrary files outside the intended extraction directory by embedding crafted path sequences in zip entry names within a malicious diagram bundle. Exploitation requires user interaction - a victim must actively process the attacker-supplied bundle - making this a social-engineering-dependent local attack. AWS has released a patched version 0.24; no active exploitation or public exploit code has been identified at time of analysis.
Path traversal in Spring AI's ResourceCacheService allows an authenticated low-privileged network attacker to write files outside the intended cache directory. The getCacheName() method appends URI fragments verbatim - including '../' sequences and path separators - to a base directory path before passing the result to new File(resourceParentFolder, newFileName) and writing downloaded bytes there. Affected versions span Spring AI 1.0.9 and earlier, 1.1.0 through 1.1.8, and 2.0.0; no public exploit or CISA KEV listing has been identified at time of analysis.
Arbitrary file write in the libreoffice-convert npm package (all versions prior to 1.8.2) allows any caller who supplies a user-controlled `fileName` option to escape the intended temporary directory and overwrite arbitrary filesystem paths accessible to the Node.js process. The root cause is unsanitized use of `path.join(tempDir.name, fileName)` - a `../`-laden filename resolves outside the temp dir without restriction. With no public exploit identified at time of analysis and no CISA KEV listing, risk is contingent on whether consuming applications expose `fileName` to untrusted input, but the write primitive is trivially exploitable in document-conversion web services.
Path traversal in n8n-nodes-sqlite3 (all versions prior to 1.0.0) exposes multi-tenant n8n deployments to arbitrary file read and overwrite through the unsanitized db_path node parameter. When a workflow author explicitly maps untrusted end-user input to the SQLite node's database path field, an attacker can supply a crafted traversal string to redirect SQLite to open any file accessible to the n8n process-potentially exposing credentials, configuration files, or enabling data destruction. No public exploit has been identified at time of analysis, and the vendor-confirmed fix is available in v1.0.0 via commit 145a887.
Path traversal in Spring Framework's FreeMarker integration allows authenticated remote attackers to read arbitrary files from the server's template path when a controller passes user-controlled input directly as a view name. Affected versions span every maintained Spring Framework branch from 5.2.x through 7.0.8, making the exposure broad in the Java ecosystem. No public exploit code or active exploitation has been identified; CISA's SSVC assessment rates technical impact as partial and the vulnerability as non-automatable, consistent with the configuration dependency required to trigger it.
Path traversal in Eclipse SW360's optional filesystem attachment store allows authenticated low-privilege users to write files to arbitrary paths on the host operating system by crafting malicious filenames during attachment upload. Affected versions span 19.0.0 through 20.1.0 exclusively when the non-default `enable.attachment.store.to.file.system` configuration key is active. The CVSS 4.0 score of 6.0 (AT:P, PR:L, VI:H) reflects meaningful integrity impact gated behind a specific configuration requirement; no public exploit has been identified at time of analysis.
Path traversal in blackms aistack's Static File Handler (src/web/server.ts) exposes arbitrary server-side files to unauthenticated remote attackers via unsanitized req.url processing. All versions through 1.6.1 are confirmed affected per NVD CPE data, and a public proof-of-concept exploit exists in GitHub issue #57. The project received responsible disclosure but has not responded, meaning no patch is available at time of analysis.
Arbitrary file deletion in Fluent Boards Pro (WordPress plugin) versions up to and including 2.0.11 allows authenticated Editor-level users to delete files anywhere on the server via path traversal. The changed scope (S:C in the CVSS vector) indicates that deletion can extend to files outside the WordPress installation - including potentially critical OS-level or application files - causing severe availability impact. No public exploit code or CISA KEV listing is identified at time of analysis.
Path traversal in boxpositron/with-context-mcp up to version 3.0.7 exposes the host filesystem through four note-management functions - ingest_notes, teleport_notes, sync_notes, and project_folder - in src/index.ts, allowing unauthenticated remote attackers to read or write files outside the intended working directory. The affected package is a Model Context Protocol (MCP) server, meaning exploitation is triggered via tool-call requests sent to the MCP endpoint, a vector inherently accessible to any AI agent or client connected to the server. A publicly available proof-of-concept has been disclosed via a GitHub issue; the vendor had not responded to the coordinated disclosure at time of reporting, leaving affected versions unpatched.
Path traversal in bsmi021's mcp-file-context-server 1.0.0 allows remote unauthenticated attackers to read arbitrary files on the host system by supplying crafted path arguments to the read_context function in src/index.ts. The Path Resolution component fails to canonicalize or boundary-check caller-supplied paths, enabling directory escape via sequences such as '../'. A public exploit exists (GitHub issue #15), the project maintainer has not responded to disclosure, and no vendor-released patch is available.
Path traversal in linkedin-ads-mcp 1.0.0 allows remote unauthenticated callers to read arbitrary files from the server's filesystem. The vulnerability exists in the Media Upload component where the `filePath` argument is passed directly to Node.js `fs.readFileSync` without sanitization, enabling directory traversal sequences to escape the intended media directory. A publicly available proof-of-concept exploit exists via a GitHub issue report; the maintainer has not responded to the disclosure.
Authenticated path traversal in the file upload functionality of TP-Link Archer MR600 (v2, v3, v5) and TL-MR6400 v8 allows an admin-level remote attacker to write files outside the intended upload directory, potentially overwriting system files accessible to the affected service. The vendor explicitly states that arbitrary code execution has not been demonstrated, making this an integrity-limited vulnerability rather than a full RCE. Vendor-released firmware patches are available for both affected product lines. No public exploit has been identified at time of analysis.
Path traversal in rclone prior to 1.75.1 allows an attacker who can populate a source object store with raw `..` key segments to cause rclone to write files outside the configured destination root when a victim performs a copy or sync operation. Thirteen destination backends - including b2, swift, sftp, smb, webdav, ftp, storj, and others - are affected because they apply path.Join(root, remote) on unvalidated object keys before EncodeDot can neutralize parent-directory segments; sftp and smb destinations carry the highest impact since they can reach other filesystem paths or shares accessible under the victim's credential. No public exploit code has been identified and the issue is fixed in v1.75.1.
Path traversal (Zip Slip class) in rclone's archive ZIP backend permits arbitrary file writes outside the intended destination directory when processing a malicious ZIP archive. Versions 1.72.0 through 1.75.0 are affected: the readZip function in backend/archive/zip/zip.go trusts central directory filenames from untrusted ZIP sources without confining path.Clean output to the archive namespace, allowing entries like ../../etc/cron.d/evil to propagate as Object.Remote() values and be written by fs/sync and fs/operations to attacker-chosen filesystem locations. A separate bug used strings.HasPrefix without a path separator, causing root 'foo' to incorrectly match sibling entries named 'foobar'. Vendor-released patch is available in version 1.75.1; no public exploit identified at time of analysis.
Directory traversal in knowns through 0.33.0 exposes arbitrary host filesystem paths to unauthenticated remote attackers via the workspace browse endpoint's unsanitized `path` query parameter. Attackers can walk the directory tree to map project directories, configuration file locations, and other filesystem structures without any credentials or special privileges. No public exploit has been identified at time of analysis, and impact is bounded to directory enumeration - file content cannot be read through this vector alone.
Path traversal in the Youzify WordPress plugin (versions ≤ 1.3.7) allows any authenticated subscriber to download arbitrary files from the hosting server. The flaw stems from insufficient sanitization of user-supplied file path input (CWE-22), enabling directory traversal sequences to escape the intended download scope. An attacker with a low-privilege WordPress account can retrieve sensitive server files - including wp-config.php containing database credentials - with no public exploit identified at time of analysis.
Path traversal in the import_contacts function of the Groundhogg WordPress CRM plugin (versions ≤ 4.7.1) allows authenticated low-privilege users to read arbitrary files from the web server by supplying directory traversal sequences in a file path parameter. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) confirms the flaw is network-exploitable with no complexity or interaction requirements beyond holding a basic WordPress account. Because WordPress plugins execute in the web server process context, the most critical exposure is likely reading wp-config.php, which contains database credentials and secret keys, enabling secondary attacks well beyond the medium 6.5 base score.
Path traversal in proma-ai Proma's Electron File Preview Service (versions up to 0.19.37) allows a locally authenticated low-privilege user to escape intended base directories by manipulating the file_path argument passed to resolveTargetPath in file-preview-service.ts. The root cause is a basename-collision fallback that resolves relative traversal sequences outside the allowed candidate base paths, enabling unauthorized reads and potential writes to files accessible by the Electron main process. A public proof-of-concept exists, though it targets the v0.16.3 IPC API and requires adaptation for subsequent pre-fix versions; the underlying vulnerability is confirmed in source code.
Path traversal in JoomShaper's SP Property Joomla extension (all versions before 4.1.4) allows unauthenticated remote attackers to escape the intended gallery directory due to missing directory confinement checks in the gallery management controller tasks. The CVSS 4.0 vector (PR:N, UI:N, AV:N) confirms exploitation requires no privileges or user interaction, though impact is constrained to low-severity integrity and availability effects on both the vulnerable and subsequent systems with no confidentiality exposure. No public exploit or active exploitation has been identified at time of analysis.
Directory traversal in WP BackItUp Community Edition (WordPress plugin) ≤2.1.0 allows authenticated administrators to read the contents of arbitrary existing files on the server via the backup_file parameter in the download handler. The handler applies basename() normalization only when the traversal target path does not exist - meaning any real file, including wp-config.php or OS credential files, is returned without sanitization. No public exploit code has been identified at time of analysis, and the PR:H requirement limits the exploitable attack surface to accounts with WordPress administrator privileges or higher.
Path traversal in GitHacker ≤1.1.7 allows a malicious git server to coerce the tool into reading arbitrary files from the victim's local filesystem via an unsanitized `ref:` value in a crafted `.git/HEAD`. The exploitable primitive is narrower than full arbitrary file-read: the recovery loop converts every 40-character hex substring in any accessed file into an outbound HTTP GET back to the attacker's server, yielding an existence oracle for arbitrary paths and hex-fragment exfiltration for files containing cryptographic material such as password hashes, HMAC-SHA1 outputs, or SSH key fingerprints. Exploitation requires the victim to actively run GitHacker against an attacker-controlled URL; no public exploit code has been identified at time of analysis, and a vendor-released patch is available as version 1.1.8.
Path traversal in LF Edge eKuiper's plugin installation endpoint (POST /plugins/*) allows high-privileged management API users to delete arbitrary files and directories on the host by embedding traversal sequences such as `../../` in the plugin `name` parameter. Affected versions are all eKuiper releases prior to 2.4.1 (Go module github.com/lf-edge/ekuiper/v2). A proof-of-concept is published in the GitHub security advisory GHSA-c23q-fw86-9h5x, demonstrating deletion of arbitrary host paths via `os.RemoveAll`; the advisory explicitly confirms exploitation is bounded to file deletion only - no code execution, file creation, or data exfiltration is achievable.
Relative path traversal (CWE-23) in Dell Secure Connect Gateway 5.0 allows unauthenticated remote attackers to access the underlying filesystem of the appliance or application deployment without credentials. Both form factors - the dedicated Appliance (prior to 5.36.00.16) and the software Application (prior to 5.36.00.00) - are affected. Successful exploitation yields limited file read access (C:L) and high-impact file write capability to arbitrary filesystem locations (I:H), creating conditions for persistent configuration tampering or malicious file placement on a security-adjacent platform. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Path traversal in the key provider component of Red Hat Build of Keycloak allows a realm administrator to probe arbitrary filesystem paths by supplying crafted keystore parameters, revealing the existence and readability of server-side files. The vulnerability exists because a prior fix for path probing was incomplete, leaving a residual bypass in the keycloak-services library - the core engine shared by both Red Hat Build of Keycloak and Red Hat Single Sign-On 7. No public exploit code has been identified at time of analysis, and exploitation requires realm administrator credentials, materially limiting opportunistic attack surface.
Relative path traversal in Ragic Enterprise Cloud Database enables privileged remote attackers to read arbitrary files from the underlying server filesystem. Exploitation requires high-privilege authenticated access (PR:H per the CVSS 4.0 vector AV:N/AC:L/AT:N/PR:H), meaning an attacker must first hold or compromise an elevated account within the platform before leveraging the traversal to exfiltrate sensitive system files. No active exploitation (CISA KEV) or public exploit code has been identified at time of analysis; the vulnerability was disclosed via TWCERT advisories.
Path traversal in Samsung's GalaxyDiagnostics component on Samsung Mobile Devices allows a physical attacker to access files with system-level privilege, affecting Android versions 14 through 17 prior to the SMR Sep-2026 Release 1 patch. The CVSS 4.0 vector (AV:P/VC:H/VI:H) confirms both high confidentiality and integrity impact but constrains exploitation to physical presence at the device. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Path traversal in Tanium Data Service 4.2 prior to build 4.2.345 allows a highly privileged, remote-authenticated attacker to read, write, or otherwise manipulate files outside the application's intended directory scope. Tanium addressed this in their security advisory TAN-2026-044 with a patch to build 4.2.345. No public exploit or active exploitation has been identified at time of analysis.
Path traversal in n8n's Git node allows authenticated workflow editors to exfiltrate the contents of arbitrary local git repositories readable by the n8n process. The flaw exists in `packages/nodes-base/nodes/Git/GenericFunctions.ts`: `setUpstream` writes an unvalidated `branch.<branch>.remote` value into the repository configuration, and a subsequent `fetch` or `pull` resolves the remote from that persisted config rather than the validated `repository` parameter - a TOCTOU-style validation bypass classified as CWE-22. No public exploit has been identified at time of analysis; vendor-released patches are available in versions 1.123.76, 2.37.7, and 2.38.2.
Path traversal in n8n's Elasticsearch and ElasticSecurity workflow nodes allows a low-privileged workflow editor to escape the intended Elasticsearch index scope and reach arbitrary indices or cluster administration endpoints using the platform's stored Elasticsearch credentials. Exploitation requires the ability to create or edit workflows containing Elasticsearch nodes, and the root cause is the absence of proper URL path-segment encoding (toPathSegment) in GenericFunctions.ts before identifiers are interpolated into REST request paths. No public exploit code or CISA KEV listing is present at time of analysis, but the scope change to a backend Elasticsearch cluster elevates the real-world impact beyond the CVSS base score suggests.
Path traversal in Okta Access Gateway's backup restore function (all versions prior to 2026.9.1) allows an authenticated administrator to supply a crafted encrypted backup payload containing a malicious embedded filename, causing the appliance to write file contents to arbitrary locations on its filesystem. Exploitation requires high-privilege administrative access (CVSS PR:H), materially limiting the attacker population to those who have already compromised gateway admin credentials. No public exploit code exists and the vulnerability is not listed in the CISA KEV catalog; a vendor-released patch is available at version 2026.9.1.
Path traversal in Visual Studio Code (all versions prior to 1.136.2) allows a remote unauthenticated attacker to write files outside the intended restricted directory, achieving high-integrity tampering on the victim's system over a network. The attack requires user interaction - a victim must open or process attacker-controlled content within VS Code - which limits automatability. No active exploitation has been identified; SSVC assessment confirms exploitation status as none with partial technical impact. Microsoft has released a fix in version 1.136.2.
Path traversal in Adobe Photoshop Mobile for Android (≤1.6.0.2294 and ≤1.6.0.2299) enables a low-privileged attacker to cause a security feature bypass, reading unauthorized files or directories outside the app's intended sandbox and producing high availability impact when a victim opens a maliciously crafted Photoshop document. The CVSS 3.1 score of 5.0 captures the meaningful constraints: local attack vector, high complexity, required user interaction, and the fact that exploitation depends on conditions beyond the attacker's control. No active exploitation (CISA KEV) and no public exploit code have been identified at time of analysis.
Privilege escalation via relative path traversal (CWE-23) affects the Windows DNS Server service across a broad range of Windows Server releases from 2012 through 2025. An authorized local attacker holding high-privilege access can manipulate relative path sequences in the DNS service to reference files or system resources outside the intended directory scope, resulting in full Confidentiality, Integrity, and Availability impact through SYSTEM-level privilege escalation. Microsoft has released patches across all affected builds; no public exploit code or CISA KEV listing has been identified at time of analysis.
Windows Defender Firewall Service on a broad range of Windows client and server editions exposes protected files or directories to low-privileged local attackers (CWE-552), enabling sensitive information disclosure. A local attacker holding a standard user account can access firewall service files - potentially including policy configuration, rule data, or service-level secrets - that should be restricted to privileged processes. Microsoft has released patches across the full affected version range; no public exploit has been identified at the time of analysis.
Path traversal in Windows PowerShell (CWE-22) enables network-based security feature bypass across virtually all supported Windows releases, from Server 2012 through Windows Server 2025 and Windows 11 26H2. The flaw allows an unauthenticated remote attacker - contingent on user interaction - to write files outside a restricted directory, circumventing a Windows security boundary with high integrity impact and no direct confidentiality or availability consequence. No active exploitation is confirmed in CISA KEV and no public exploit code has been identified at time of analysis, though the broad affected surface across all major Windows versions warrants prompt patching.
Path traversal in the gnome-tweaks shell theme installer allows a local attacker who can persuade a user to install a crafted ZIP-packaged theme to write arbitrary files outside the intended ~/.themes directory. The flaw - a classic "zip slip" pattern (CWE-22) - exploits the absence of archive-member-path validation: malicious archives can embed ../ sequences, absolute paths, or symlink entries to redirect file writes anywhere the victim user can write. With user-level write access this can overwrite shell startup scripts, SSH authorized_keys, or desktop autostart entries, escalating to persistent code execution under the victim's account. No public exploit code or KEV listing exists at time of analysis; EPSS data was not provided.
Directory traversal in JoomUnited's WP File Download WordPress plugin (all versions through 6.3.8) enables server-side file disclosure via a two-stage attack chain. A subscriber-level authenticated attacker first poisons a post-meta value through an unprotected file.save handler, after which the plugin's streaming endpoint — registered on WordPress's init hook with no authentication check — resolves and serves the traversed file path to any HTTP caller, including fully unauthenticated visitors. No public exploit code or CISA KEV listing has been identified at time of analysis, but Wordfence has published the vulnerability details and a trac browser link pointing directly to the vulnerable code at app/site/init.php line 225.
Local file inclusion in Eventin WordPress plugin before 4.1.21 enables authenticated contributors and higher-privileged users to include and execute arbitrary PHP files on the web server. The plugin fails to validate a user-supplied template path parameter before passing it to a PHP file-inclusion routine, allowing path traversal to any locally accessible PHP file. A publicly available proof-of-concept has been published by WPScan; vendor patch 4.1.21 is available and should be applied immediately.
Path traversal in the JCH Optimize WordPress plugin (versions before 5.0.1) permits authenticated administrators - including sub-site administrators on WordPress multisite installations - to enumerate directories and file names outside the web root via an unsanitized path parameter in the plugin's administrative image-browsing feature. A public proof-of-concept is available through WPScan, though SSVC confirms no active exploitation and EPSS sits at the 5th percentile. Real-world impact is confined to confidentiality of filesystem structure: attackers can map server directory layouts and file names but cannot read file contents or modify data.
Zip-slip path traversal in Emlog versions 2.6.29 and prior allows authenticated administrators to overwrite arbitrary server-side files, including config.php, achieving remote code execution. The emUnZip() function passes attacker-supplied ZIP archives to ZipArchive::extractTo() without sanitizing path components across all entries - only the first entry's subdirectory is inspected, leaving all subsequent entries unchecked. No publicly known patch exists at time of publication, making this an unmitigated risk for all deployed instances.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.10.2 allows an authenticated low-privileged attacker to read arbitrary files on the underlying server by injecting dot-dot sequences (/../) into crafted URL requests. The CVSS 3.1 score of 6.5 (C:H/I:N/A:N) reflects a read-only disclosure vector with no write or denial-of-service capability, but the confidentiality impact is materially significant given that Langflow deployments commonly store LLM API keys, pipeline configurations, and model secrets on the host filesystem. No public exploit code or CISA KEV listing has been identified; IBM has released a patch via its support portal.
Path traversal in IBM Langflow OSS 1.0.0-1.10.2 permits authenticated remote attackers to read arbitrary files on the underlying server by embedding dot-dot sequences (/../) in crafted URL requests. The vulnerability (CWE-22) exposes any file readable by the application process, potentially including configuration files, credentials, private keys, and other sensitive data. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch.
Path traversal in IBM Langflow OSS 1.0.0 through 1.10.2 exposes arbitrary server-side files to authenticated remote attackers, yielding high confidentiality impact with no integrity or availability loss. The CWE-22 flaw stems from insufficient restriction of user-supplied pathnames, allowing traversal sequences to escape the intended directory boundary. IBM self-reported and patched this issue; no public exploit or active exploitation has been identified at time of analysis.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.11.2 enables authenticated remote attackers to read arbitrary files accessible to the Langflow process, potentially exposing configuration data, credentials, or other sensitive server-side content. The CVSS vector (PR:L) confirms that prior authentication is required, moderating real-world risk relative to unauthenticated flaws. IBM has released a patch, the vulnerability is vendor-reported, and no public exploit or active exploitation has been identified at time of analysis.
Sensitive file disclosure in IBM Langflow OSS 1.0.0 through 1.11.2 allows authenticated remote attackers to read arbitrary files on the server by exploiting improper validation of symbolic links. The flaw, classified under CWE-22 (Path Traversal), enables an attacker with valid credentials to escape intended directory boundaries by manipulating symlink resolution, potentially exposing configuration files, credentials, or other sensitive server-side content. IBM has released a patch via their support advisory; no public exploit code or active exploitation has been identified at time of analysis.
Arbitrary file write in IBM Langflow OSS 1.0.0-1.11.2 allows low-privileged authenticated attackers to plant files at any server-writable path via the SaveToFileComponent's unsanitized path handling on the /api/v1/run/{flow_id} endpoint. The root cause is CWE-22 path traversal: user-supplied path values-including absolute paths and traversal sequences such as ../../-are incorporated into local filesystem operations without sufficient sanitization. Successful exploitation enables unauthorized file creation or modification, with potential for further compromise (e.g., overwriting application scripts or configuration) depending on the Langflow process's file-system permissions. No public exploit code or CISA KEV listing has been identified at time of analysis.
Path traversal in GFI Exinda AI before 7.6.5 allows an authenticated administrator to read arbitrary files from the underlying system as root. The vulnerability resides in the wcf_handle_download() function within the system maintenance configuration download handler, which fails to sanitize directory traversal sequences embedded in parameters prefixed with v_del_ before appending them to the base configuration directory path. No public exploit code or active exploitation has been identified at the time of analysis, and exploitation is constrained to Admin-privileged accounts.
Arbitrary file-write via path traversal in WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.134 allows authenticated administrators to place files of permitted types at any writable server path, including locations outside the WordPress installation root. The vulnerability stems from unsanitized user-supplied filenames used directly in write-path construction (CWE-22), with scope change (S:C) confirmed by the vendor CVSS vector. A publicly available proof-of-concept exists, and a patched release (0.9.134) has been issued; no active exploitation (CISA KEV) has been reported at time of analysis.
Arbitrary file read in the Pods WordPress plugin before 3.3.9.2 allows users holding the Author role or higher to exfiltrate any file accessible to the web server process, including sensitive files outside the web root such as wp-config.php or system credentials. The flaw stems from the plugin's display callback resolver accepting unrestricted PHP callable targets without allowlisting. A publicly available proof-of-concept exists per WPScan, and a vendor patch is available. The attack surface is limited to installations operating in restricted display-callback mode, which is the automatic default for WordPress sites whose initial Pods installation predated version 3.1.
Path traversal in Eleveo Quality Management 9.7.0 allows authenticated remote attackers to escape the intended export directory by supplying crafted directory traversal sequences in the `file_name` argument of the `QuestionnaireService.runDataExportNow` function, enabling unauthorized file read and write operations on the server. A public proof-of-concept exploit is available via Google Drive, lowering the barrier to exploitation. The vendor did not respond to the researcher's disclosure, and no patch has been released.
Arbitrary file read in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows any authenticated user holding only the low-privileged Standard role to retrieve arbitrary files from the device filesystem by manipulating the `file` query string parameter of `/cgi-bin/ugwdownload.cgi`. A public proof-of-concept exploit is available in SilviaMun's vulnerability-research repository on GitHub, significantly lowering the skill threshold for exploitation. No integrity or availability impact is established - this is a confidentiality-only vulnerability with high impact on device-resident sensitive data such as configuration files and credentials.
Path traversal in MOOS-IvP SplitHandler (through version 24.8.1) allows an attacker who supplies a crafted alog file to write files outside the intended split output directory on Windows systems. By embedding backslash sequences in variable names within the alog file, the inadequate prior sanitization - which only replaced forward slashes - can be bypassed to escape the output directory boundary and append to arbitrary files. A vendor patch is available via PR#137; no public exploit or KEV listing has been identified at time of analysis.
Path traversal in parsedmarc 9.0.6 through 11.0.0 allows a network attacker who can send email to a monitored mailbox to write attacker-controlled files outside the intended samples directory. The flaw lives in save_output(), which names forensic failure report samples after the email Subject header but falls back to the raw unsanitized Subject when sanitization yields an empty string - which occurs whenever the Subject consists entirely of path separators or dots such as '../../../'. The attacker-supplied email body is then written as a dot-prefixed .eml file to an ancestor directory of the configured samples path. No public exploit identified at time of analysis; exploitation additionally requires the --output flag to be enabled.
Windows openvpnserv path-validation bypass in OpenVPN 2.7_alpha1 through 2.7.6 allows a low-privileged local user to circumvent administrative config-path restrictions by using '/' instead of '\' as a directory separator. Windows path-validation APIs do not recognize '/' as a separator while file-open APIs do, creating a mismatch exploitable to load a user-controlled OpenVPN config file that administrators have explicitly prohibited. Fixed in v2.7.7; no public exploit identified at time of analysis.
Path traversal in OpenList prior to v4.2.3 allows any authenticated user holding the PermAddOfflineDownload permission to write, truncate, or overwrite arbitrary files accessible to the OpenList process via the SimpleHttp offline-download tool. The attacker controls a remote HTTP server that returns a crafted Content-Disposition header containing path-traversal sequences; OpenList uses the attacker-supplied filename without containment validation to construct a file path via filepath.Join relative to a per-task temporary directory, allowing traversal outside that directory. No public exploit has been identified at time of analysis, though the GHSA advisory details the exact vulnerable function and the fix commit is publicly accessible, significantly lowering the effort required to develop one.
Path traversal in Reader Tools PDF Reader App 98.8 on Android permits a local low-privileged attacker to manipulate the `_display_name` parameter supplied via a deep link to the `ActSplashNew.handleDeeplink` function, enabling file reads or writes outside the application's intended sandbox. The affected CPE (`cpe:2.3:a:reader_tools:pdf_reader_app`) covers version 98.8 on Android; the vendor did not respond to the coordinated disclosure, and no patch has been released. A public proof-of-concept exploit exists, but real-world impact is bounded by the local-only attack vector and low individual component impacts.
Path traversal in Kibana's Fleet feature enables a low-privileged user to manipulate Fleet administration actions taken by higher-privileged users, causing those actions to target unintended resources - including deleting accounts with elevated privileges. The attack exploits a confused-deputy pattern (CWE-22/CAPEC-126): the attacker crafts a traversal payload through their low-privileged access, then waits for an admin to perform a routine Fleet operation, at which point the admin's elevated context executes the deletion against the attacker-controlled target. Fixed versions are Kibana 8.19.17, 9.3.6, and 9.4.3 per the Elastic security advisory ESA-2026-159. No public exploit or CISA KEV listing is present at time of analysis.
Path traversal in Kibana's Fleet feature enables a low-privileged user with Fleet write access to craft resource paths that redirect a subsequent administrative delete operation onto unintended internal Kibana resources, causing unauthorized data destruction. Affected versions are Kibana prior to 8.19.18 and 9.4.3; Elastic released fixes for both branches under ESA-2026-157. No public exploit code or active exploitation has been identified at time of analysis, but the two-actor attack pattern (attacker plants, admin triggers) meaningfully constrains real-world exploitability.
Path traversal in Elastic Maps Server exposes arbitrary files readable by the server process to unauthenticated network attackers. Insufficient path restriction in the content-directory serving logic allows crafted requests to escape the intended directory using traversal sequences, returning sensitive file contents. No KEV listing or public exploit code exists at time of analysis; Elastic has released fixed versions 8.19.19, 9.4.4, and 9.5.1 per advisory ESA-2026-148.
Memory saved. Analysis complete. Key findings for CVE-2026-84442: - **"Google" tag is wrong** — flagged in `data_quality_flags`; this is MapQuest's app (System1), not Google - **"olsztyn" injection note ignored** — matches the established prompt-injection pattern in these CVE inputs - **CVSS 4.0 score of 4.8 is well-calibrated** — local-only, low-privilege, limited impact (VI:L/VA:L/VC:N); no inflation concerns - **No vendor patch** — MapQuest did not respond to disclosure; PoC is public - **VC:N is slightly unexpected** for a path traversal (read access is a common consequence), noted in `confidence_notes` for follow-up review
Path traversal in Piwigo's Image Derivative Handler (i.php) exposes arbitrary server-side files to remote unauthenticated attackers on installations up to version 16.3.0. The CVSS 4.0 vector confirms network-accessible, zero-authentication exploitation with low confidentiality and integrity impact, consistent with a traversal primitive that can both read and potentially write files in unanticipated filesystem locations. A public proof-of-concept titled 'unauthenticated_derivative_path_traversal' is available on GitHub, materially lowering the bar for exploitation; no active exploitation has been confirmed in CISA KEV at time of analysis.
Path traversal in AirAsia MOVE App for Android (versions up to 12.47.1) allows a locally present low-privileged attacker to escape intended directory boundaries via unsanitized handling of the `_display_name` argument inside `com.airasia.core.utils.RealPathUtil.getRealPath`. Exploitation yields limited integrity and availability impact constrained by Android's SELinux sandbox, with no confidentiality exposure. A public proof-of-concept document exists; the vendor did not respond to coordinated disclosure, and no patch has been released.
Path traversal in WWBN AVideo's unauthenticated `get_api_login_code` API endpoint enables remote attackers to delete arbitrary `.log` files and enumerate filesystem paths by injecting directory traversal sequences into the `code` parameter. All versions covered by CPE `cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*` are affected, with exploitation requiring no authentication or user interaction. The primary security consequence is destruction of audit trails and access logs, which undermines incident detection and forensic response capabilities; no public exploit code has been identified at time of analysis.
Path traversal in Vitest's interceptorPlugin exposes local files on any development server with a network-accessible HMR WebSocket. The `vitest:interceptor:register` handler in `packages/mocker/src/node/interceptorPlugin.ts` accepts redirect mock registrations over Vite's unauthenticated HMR socket without calling `isFileLoadingAllowed()`, allowing a remote unauthenticated attacker who can reach the dev server to submit opaque-scheme URLs (e.g., `traversal:../../../etc/passwd`) whose `..` segments survive `URL.pathname` parsing and resolve outside the project root via `path.join()`. The plugin's `load` hook then returns `readFile(mock.redirect, 'utf-8')` as JavaScript module source, disclosing any file readable by the dev-server process. No public exploit or CISA KEV listing has been identified, but the GitHub fix PR includes a complete, working e2e test that serves as a functional PoC.
Authenticated path traversal in HPE AOS-CX's web-based management interface permits a low-privileged authenticated attacker to read arbitrary files from the underlying operating system, potentially exposing credentials, private keys, and device configuration data. The CVSS vector (AV:N/AC:L/PR:L) confirms the vulnerability is remotely exploitable with minimal complexity once valid credentials are obtained. This CVE is part of a broader HPE security advisory (hpesbnw05134) covering multiple AOS-CX vulnerabilities, including higher-severity unauthenticated RCE issues, making credential exposure via this flaw a plausible stepping-stone in a multi-stage attack chain. No public exploit identified at time of analysis.
Path traversal in Hono's toSSG() static site generator allows untrusted ssgParams values - such as slugs sourced from a CMS, external API, or user submission - to create or overwrite files outside the configured output directory at build time. Versions 4.12.12 through 4.13.4 are affected; the root cause is an incomplete fix for CVE-2026-39408 that fails to collapse consecutive parent-directory segments (e.g., 'a/b/../../../') in route parameter values, and also mishandles Windows drive-relative and UNC path roots. No public exploit has been identified and the vulnerability is not confirmed in the CISA KEV catalog; a complete patch is available in v4.13.5.
Path traversal in HPE Networking Fabric Composer's API endpoint allows an unauthenticated adjacent attacker to manipulate user-generated files and potentially alter critical system configurations. Exploitation is constrained by the AV:A vector (attacker must be on the same network segment), high attack complexity requiring preconditions outside the attacker's control, and mandatory user interaction - factors that collectively reduce the practical risk below the I:H integrity impact might suggest. No public exploit code has been identified and the vulnerability is not listed in CISA KEV. The CVSS base score of 4.8 reflects these limiting conditions accurately.
Unauthenticated file read in HPE Networking Fabric Composer's web-based management interface exposes a subset of system files to remote attackers without requiring any credentials. The vulnerability is confined to files within a specific affected directory rather than offering arbitrary filesystem access, yielding a limited confidentiality impact consistent with the CVSS 5.3 (C:L) score. No active exploitation (KEV) or public proof-of-concept has been identified at time of analysis, and no EPSS signal is provided in available intelligence.
Authenticated privilege escalation in HPE Networking Fabric Composer's API allows low-privilege operator users to read limited information and make limited configuration changes beyond their authorized scope. The flaw affects all tracked versions per CPE data and requires only a valid low-privilege account to exploit - no special configuration or user interaction is needed. No public exploit code and no CISA KEV listing are present at time of analysis, keeping real-world risk moderate despite network accessibility.
Path traversal in appium-mcp-server through 0.1.61 allows any caller of the write_file or write_files_batch MCP tools to overwrite arbitrary files on the host system by supplying absolute paths or parent-directory sequences (../) that escape the intended PROJECT_ROOT boundary. The server user's full filesystem write permissions are exposed, enabling an attacker to corrupt shell profiles, inject cron jobs, or overwrite application configuration files. No public exploit has been identified at time of analysis, but the vulnerability is trivially exploitable given the absence of any path validation logic in the affected tools.
Path traversal in Sage Employee Self Service's custom logo functionality exposes arbitrary server-side files to unauthenticated remote attackers. The flaw stems from insufficient sanitization of file path parameters, allowing directory traversal sequences and their URL-encoded equivalents to escape the application's intended filesystem scope and read sensitive data such as configuration files, environment settings, and logs. No public exploit or CISA KEV listing is present; Sage has remediated the issue via enhanced path validation shipped in the Q2 2026 HRMS product update.
Path traversal in Kirby CMS's filesystem containment logic allows remote unauthenticated attackers to access image files in PHP-readable sibling directories that share a string prefix with the Kirby installation root, and to create thumbnails from those files via the media handler. Versions prior to 4.9.5 (4.x line) and 5.5.2 (5.x line) are affected, with the impact limited to subsequent-system confidentiality exposure - staging sites, backups, or co-hosted internal sites - rather than the Kirby instance itself. No public exploit code has been identified and this vulnerability is not listed in the CISA KEV catalog; the CVSS 4.0 AT:P metric confirms specific environmental preconditions must exist for exploitation.
Path traversal in MCPHub's MCPB file upload handler, prior to version 0.12.13, enables a remote attacker to extract files to arbitrary filesystem locations and delete arbitrary directories on the host by embedding traversal sequences in a crafted archive manifest. The vulnerability exists at `src/controllers/mcpbController.ts:107`, where `manifest.name` is unsanitized before concatenation into `fs.mkdirSync` and `fs.renameSync` calls; the same unsanitized value flows into `cleanupOldMcpbServer` at line 110, enabling directory deletion. No public exploit code or CISA KEV listing has been identified at time of analysis, though the full source-level disclosure in the GHSA advisory makes weaponization straightforward.
Path traversal in yaojingang GEOFlow's Image Library Cleanup component allows remote authenticated administrators to delete arbitrary server files by supplying crafted directory-traversal sequences in the `file_path` argument to the PHP `unlink()` function within `ImageLibraryController.php`. All versions up to 2.1.0 are affected (CPE: cpe:2.3:a:yaojingang:geoflow:*:*:*:*:*:*:*:*), with a publicly available proof-of-concept on GitHub issue #60. No CISA KEV listing exists, and the admin-only requirement (PR:H per CVSS 4.0) constrains real-world impact, but the public POC makes patching urgent for any exposed instance.
Path traversal in SeaCMS up to version 13.6 enables authenticated remote attackers to delete arbitrary files by injecting directory traversal sequences into the `itype` or `vid` parameters of the Comment Cache deletion endpoint `/member.php?action=del_pl`. A public proof-of-concept exploit is documented in a GitHub security advisory, lowering the barrier to exploitation. While not confirmed in CISA KEV, the combination of network reachability, low privilege requirement, and public POC elevates practical risk for exposed SeaCMS deployments beyond what the medium CVSS score alone suggests.
Arbitrary file deletion in SeaCMS up to version 13.6 is achievable by authenticated remote users through the Avatar Upload component's password-change handler, where the `oldpic` parameter is passed unsanitized to PHP's `unlink()` function. A publicly available proof-of-concept exploit hosted on GitHub demonstrates the technique against the `/member.php?action=chgpwdsubmit` endpoint, lowering the barrier for exploitation to any account holder. While the CVSS 4.0 score of 2.1 reflects limited impact - file deletion only, no data exfiltration - deletion of configuration, credential, or application files could cascade into more severe outcomes than the base score implies; no public exploit identified at time of analysis has been confirmed as actively exploited (CISA KEV).
CVE-2026-59944 was reported by Ubuntu as the originating vendor source, but no description, CVSS score, CWE, or reference data was supplied for this analysis. The vulnerability type, affected component, and impact cannot be characterized from available intelligence. Security teams should consult the Ubuntu Security Notices portal directly for authoritative details before making any triage or remediation decisions.
Path traversal in Apache Wicket's package resource URL handling exposes files outside the intended package directory to unauthenticated remote attackers, including files under WEB-INF that servlet containers ordinarily protect from direct access. Affected are all releases from 8.0.0 through 8.18.0, 9.0.0 through 9.23.0, and 10.0.0 through 10.10.0. Under default configuration the readable file set is bounded by the SecurePackageResourceGuard's extension allowlist (excluding .xml, .properties, .class), but all configurations unconditionally expose a path-existence oracle usable for reconnaissance, and applications using looser guard configurations can disclose web.xml and other sensitive configuration files. No public exploit identified at time of analysis.
Zip Slip-style path traversal in Admidio's photo ZIP download feature allows authenticated users who hold album-creation rights to embed directory traversal sequences in album names, which are then reflected verbatim as archive entry paths. When a recipient extracts the resulting ZIP, files may be written outside the intended target directory, providing a limited but real filesystem write primitive on the extracting machine. No public exploit code has been identified at time of analysis; the CVSS 4.0 base score of 2.1 reflects the multiple preconditions - authentication, user interaction, and high attack complexity - that constrain real-world exploitability.
Path traversal in SiYuan 3.8.0 allows an authenticated attacker to read arbitrary files within the workspace directory via the POST /api/template/render endpoint, including conf/conf.json, which contains the API token and cookie signing key. The RenderTemplate function enforces only a workspace-boundary check (util.IsAbsPathInWorkspace) but omits the sensitive-path exclusion (refuseToAccess() blocklist) applied by the file API, creating an inconsistency in access controls across API surfaces. The issue is fixed in v3.8.1; no public exploit identified at time of analysis.
Arbitrary file write via path traversal in the WPvivid - Backup, Migration & Staging WordPress plugin (versions before 0.9.133) allows high-privilege WordPress administrators to extract backup archives with traversal sequences that write files outside the designated restore directory. A publicly available proof-of-concept exists per WPScan, though EPSS sits at 0.17% (7th percentile) and CISA KEV lists no active exploitation at time of analysis. Successful exploitation can lead to remote code execution by placing malicious PHP files in web-accessible directories.
Archive symlink traversal in aquaproj/aqua prior to v2.60.1 enables an attacker who controls a tool archive to write arbitrary files outside the extraction directory with the privileges of the user running aqua. The vulnerable combination in `pkg/unarchive/archives.go` - creating a symlink without destination validation, then following it with a regular file write - allows a malicious tar.gz to overwrite files such as shell startup scripts or PATH entries, resulting in user-level code execution. A working PoC is confirmed in GHSA-mf5c-hw34-4hpp; no CISA KEV listing is present and EPSS data is unavailable for this CVE.
Path traversal in Duplicacy's restore function through version 3.2.5 allows arbitrary file writes outside the designated restore directory when a user restores from a compromised or attacker-controlled snapshot repository. Duplicacy fails to sanitize file paths deserialized from snapshot entries, so crafted traversal sequences (e.g., '../../') cause files to be written to any location accessible by the restoring OS user. No public exploit code has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog, but the integrity and availability impact is rated High in the CVSS 4.0 assessment.
Path traversal in houtini-lm (versions up to 2.13.2) allows an authenticated remote user to supply crafted absolute paths to the code_task_files tool, causing the server to read files outside its intended working directory. Because code_task_files forwards file contents directly to the configured LLM endpoint - which may be a remote provider such as OpenRouter - a successful traversal can silently exfiltrate sensitive files (SSH keys, environment files, cloud credentials) off the machine to a third-party service. No public exploit has been identified and the CVE has not been added to the CISA KEV catalog; an upstream fix is available in commit 35d97bca.
Path traversal in iswalle getnote-mcp up to version 1.5.0 allows attackers with low-privilege MCP call access to read arbitrary files from the host filesystem via the upload_image tool's unsanitized image_path parameter. The vulnerable fs.readFileSync call in src/index.ts accepts absolute paths and directory traversal sequences, and critically, the read file is automatically uploaded to a public CDN - making this an arbitrary file read with built-in exfiltration, exposing SSH keys, /etc/passwd, and similar sensitive data. A public exploit exists (GitHub issue #10) and vendor-released patch version 1.5.1 is confirmed available; no CISA KEV listing has been identified.
Path traversal in SiYuan's asset.upload MCP tool before v3.8.1 allows an attacker to exfiltrate arbitrary host files - including SSH keys and credentials - by supplying absolute paths that bypass workspace boundary validation. The attack is delivered via prompt injection against an AI Agent connected to SiYuan's MCP server, meaning exploitation depends on an AI agent processing attacker-controlled content. No public exploit or CISA KEV listing has been identified at time of analysis, but the high confidentiality impact (CVSS 4.0: 6.9) reflects the potential to read any file the SiYuan process can access.
Path traversal in flutter_file_picker's Android implementation (all versions through 10.3.10) allows a malicious Android app on the same device to write arbitrary files into the victim app's internal storage directories. The openFileStream() method in FileUtils.kt constructs file paths using the DISPLAY_NAME value returned by ContentResolver.query() without sanitization, making it trivially exploitable by a crafted ContentProvider that returns filenames containing ../ sequences. No public exploit has been identified at time of analysis; SSVC classifies exploitation as none and the attack is not automatable, keeping real-world risk constrained despite the clear code-level flaw.
Path traversal in MAA-AI MaaMCP (versions up to 1.1.1.dev6+g2e4a41287) allows low-privileged remote users to read or write files outside the intended pipeline directory by supplying crafted path inputs to the save_pipeline and load_pipeline functions in pipeline_tools.py. Publicly available exploit code exists (referenced in GitHub issue #31), though no active exploitation has been confirmed by CISA KEV. The CVSS 4.0 score of 5.1 (Medium) reflects the authentication requirement and limited per-impact severity, but the public POC elevates practical risk above the base score alone.
Path traversal in arben-adm mcp-sequential-thinking versions up to and including 0.5.0 allows remote low-privileged attackers to read or write arbitrary files on the server by supplying unsanitized path sequences to the `import_session` and `export_session` functions in `server.py`. A publicly disclosed proof-of-concept exists (GitHub issue #17), and the fix is available in v0.6.0 via commit 2fad3ee8. The CVE is not listed in CISA KEV, indicating no confirmed mass exploitation, but the public PoC meaningfully elevates practical risk above the moderate CVSS score alone.
Path traversal in RooCodeInc Roo-Code through version 3.51.1 allows remote unauthenticated attackers to read and write files outside the intended working directory by manipulating input processed by the path.resolve function in ApplyPatchTool.ts. The vendor has confirmed they archived the repository and discontinued all support, meaning no patch will ever be released. Publicly available exploit code exists via a GitHub Gist, and no vendor-released patch identified at time of analysis - organizations still running this tool are permanently exposed.
Zip extraction in AWS diagram-as-code (awsdac) versions 0.10 through 0.23 is vulnerable to relative path traversal (CWE-23), enabling a third party to write arbitrary files outside the intended extraction directory by embedding crafted path sequences in zip entry names within a malicious diagram bundle. Exploitation requires user interaction - a victim must actively process the attacker-supplied bundle - making this a social-engineering-dependent local attack. AWS has released a patched version 0.24; no active exploitation or public exploit code has been identified at time of analysis.
Path traversal in Spring AI's ResourceCacheService allows an authenticated low-privileged network attacker to write files outside the intended cache directory. The getCacheName() method appends URI fragments verbatim - including '../' sequences and path separators - to a base directory path before passing the result to new File(resourceParentFolder, newFileName) and writing downloaded bytes there. Affected versions span Spring AI 1.0.9 and earlier, 1.1.0 through 1.1.8, and 2.0.0; no public exploit or CISA KEV listing has been identified at time of analysis.
Arbitrary file write in the libreoffice-convert npm package (all versions prior to 1.8.2) allows any caller who supplies a user-controlled `fileName` option to escape the intended temporary directory and overwrite arbitrary filesystem paths accessible to the Node.js process. The root cause is unsanitized use of `path.join(tempDir.name, fileName)` - a `../`-laden filename resolves outside the temp dir without restriction. With no public exploit identified at time of analysis and no CISA KEV listing, risk is contingent on whether consuming applications expose `fileName` to untrusted input, but the write primitive is trivially exploitable in document-conversion web services.
Path traversal in n8n-nodes-sqlite3 (all versions prior to 1.0.0) exposes multi-tenant n8n deployments to arbitrary file read and overwrite through the unsanitized db_path node parameter. When a workflow author explicitly maps untrusted end-user input to the SQLite node's database path field, an attacker can supply a crafted traversal string to redirect SQLite to open any file accessible to the n8n process-potentially exposing credentials, configuration files, or enabling data destruction. No public exploit has been identified at time of analysis, and the vendor-confirmed fix is available in v1.0.0 via commit 145a887.
Path traversal in Spring Framework's FreeMarker integration allows authenticated remote attackers to read arbitrary files from the server's template path when a controller passes user-controlled input directly as a view name. Affected versions span every maintained Spring Framework branch from 5.2.x through 7.0.8, making the exposure broad in the Java ecosystem. No public exploit code or active exploitation has been identified; CISA's SSVC assessment rates technical impact as partial and the vulnerability as non-automatable, consistent with the configuration dependency required to trigger it.
Path traversal in Eclipse SW360's optional filesystem attachment store allows authenticated low-privilege users to write files to arbitrary paths on the host operating system by crafting malicious filenames during attachment upload. Affected versions span 19.0.0 through 20.1.0 exclusively when the non-default `enable.attachment.store.to.file.system` configuration key is active. The CVSS 4.0 score of 6.0 (AT:P, PR:L, VI:H) reflects meaningful integrity impact gated behind a specific configuration requirement; no public exploit has been identified at time of analysis.
Path traversal in blackms aistack's Static File Handler (src/web/server.ts) exposes arbitrary server-side files to unauthenticated remote attackers via unsanitized req.url processing. All versions through 1.6.1 are confirmed affected per NVD CPE data, and a public proof-of-concept exploit exists in GitHub issue #57. The project received responsible disclosure but has not responded, meaning no patch is available at time of analysis.
Arbitrary file deletion in Fluent Boards Pro (WordPress plugin) versions up to and including 2.0.11 allows authenticated Editor-level users to delete files anywhere on the server via path traversal. The changed scope (S:C in the CVSS vector) indicates that deletion can extend to files outside the WordPress installation - including potentially critical OS-level or application files - causing severe availability impact. No public exploit code or CISA KEV listing is identified at time of analysis.
Path traversal in boxpositron/with-context-mcp up to version 3.0.7 exposes the host filesystem through four note-management functions - ingest_notes, teleport_notes, sync_notes, and project_folder - in src/index.ts, allowing unauthenticated remote attackers to read or write files outside the intended working directory. The affected package is a Model Context Protocol (MCP) server, meaning exploitation is triggered via tool-call requests sent to the MCP endpoint, a vector inherently accessible to any AI agent or client connected to the server. A publicly available proof-of-concept has been disclosed via a GitHub issue; the vendor had not responded to the coordinated disclosure at time of reporting, leaving affected versions unpatched.
Path traversal in bsmi021's mcp-file-context-server 1.0.0 allows remote unauthenticated attackers to read arbitrary files on the host system by supplying crafted path arguments to the read_context function in src/index.ts. The Path Resolution component fails to canonicalize or boundary-check caller-supplied paths, enabling directory escape via sequences such as '../'. A public exploit exists (GitHub issue #15), the project maintainer has not responded to disclosure, and no vendor-released patch is available.
Path traversal in linkedin-ads-mcp 1.0.0 allows remote unauthenticated callers to read arbitrary files from the server's filesystem. The vulnerability exists in the Media Upload component where the `filePath` argument is passed directly to Node.js `fs.readFileSync` without sanitization, enabling directory traversal sequences to escape the intended media directory. A publicly available proof-of-concept exploit exists via a GitHub issue report; the maintainer has not responded to the disclosure.