Path Traversal
Monthly
Path traversal in Veno File Manager 4.4.9 exposes arbitrary server files to authenticated super administrators via two crafted HTTP requests targeting /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php. The vulnerability allows directory escape through unsanitized path parameters, enabling disclosure of sensitive files such as configuration files, credentials, or system data accessible to the web server process. A public proof-of-concept repository exists on GitHub (jfs-jfs/CVE-2026-37066), and no public exploit has been confirmed as actively exploited per CISA KEV.
Path traversal in Spring Integration's ZipTransformer allows a low-privileged attacker who controls the file_name message header to write ZIP archive output to arbitrary filesystem paths outside the configured workDirectory. Affected versions span the 6.4.x, 6.5.x, 7.0.x, and 7.1.0 release lines of Spring Integration, and exploitation is viable by default since ZipResultType.FILE is the standard configuration. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Path traversal in ZLMediaKit's downloadFile API allows an authenticated operator holding the API secret to read files from sibling directories outside the configured root, because the root path is built without a trailing separator and the confinement check is a bare prefix comparison. The flaw is isolated to server/WebApi.cpp and does not affect the standard static file server in src/Http/HttpFileManager.cpp. No patch version has been confirmed and no public exploit has been identified at time of analysis, but because the reference container runs as root, a secret-holding attacker can read arbitrary host filesystem content.
Path traversal in RustDesk's macOS clipboard file-paste feature allows a remote session peer to write files outside the intended target directory by supplying crafted file descriptor names containing parent-directory components or absolute paths. Versions 1.3.9 through 1.4.9 on macOS are affected; exploitation requires an active RustDesk session and passive victim interaction (initiating a clipboard paste). No public exploit code and no CISA KEV listing have been identified at time of analysis; a vendor fix is available via commit 6f1eb164.
Path traversal in the Directorist WordPress plugin (versions 8.5 through before 8.9.3) allows subscriber-level authenticated users to relocate arbitrary server-readable image files into a publicly accessible directory and delete them from their original location. The flaw stems from unsanitized user-supplied image references passed directly to a file-move operation, exposing sensitive server files to unauthenticated public access after the move. Publicly available exploit code exists per WPScan reporting; however, EPSS sits at 0.19% (9th percentile), and the requirement for a subscriber-level account limits opportunistic mass exploitation.
Path traversal in rclone's serve s3 command (versions before 1.74.4) allows unauthenticated remote attackers to both read and overwrite files at the serve root directory by embedding dot-dot sequences in S3 object keys. Go's path.Join() in the S3 backend normalizes traversal sequences that the S3 protocol treats as opaque identifiers, so a request like GET /bucket/../root-secret.txt resolves outside the intended bucket scope to a root-level file. A public proof-of-concept is available; no active exploitation has been confirmed in CISA KEV, but the unauthenticated default configuration and low attack complexity make exposed instances high-priority for patching.
Local file inclusion in Winter CMS before 1.2.13 allows authenticated backend users holding the cms.manage_assets permission to exfiltrate arbitrary server-readable files - including .env - by embedding =include or =require path-traversal directives in theme JavaScript assets. The critical escalation is that the resulting combined asset output is served unauthenticated via the public combine/{file} route, meaning a single privileged write operation exposes APP_KEY and database credentials to any unauthenticated visitor. This is the JavaScript-importer counterpart of two prior Winter CMS LFI bugs (GHSA-58fp-mcx6-7qf9, CVE-2023-52085) in the same asset combiner pipeline. No public exploit identified at time of analysis; vendor-released patch available in 1.2.13.
Path traversal in dekdee's adobe-xd-mcp 1.0.0 exposes the server filesystem to remote unauthenticated attackers via unsanitized `outputFile` and `outputDir` parameters in the `file-access-from-request` endpoint of `src/parsers/xd-parser.ts`. A public proof-of-concept exploit is available through the project's GitHub issue tracker, and no patch has been released - the vendor has not responded to the disclosure. With a CVSS 4.0 score of 6.9, public exploit code (E:P), and no mitigating authentication requirement, any network-exposed instance is immediately at risk.
Path traversal in the liketrek TREK Public Journey Photo Proxy controller allows remote attackers - without authentication - to read files outside the intended directory on self-hosted instances running version 3.0.22 or earlier. The affected endpoint (`server/src/nest/journey/journey-public.controller.ts`) fails to adequately sanitize path inputs, exposing server-side files to limited confidentiality disclosure. No public exploit has been identified and the CVE is not listed in the CISA KEV catalog; a vendor-released patch is available in v3.1.0.
Path traversal in the TYPO3 Mask extension allows authenticated backend users with Mask module access to create or delete arbitrary .html files outside the configured template directory. The flaw stems from the extension's failure to validate client-supplied template element keys before using them to construct filesystem paths for saving and deleting Mask template files. No public exploit code or CISA KEV listing has been identified at time of analysis, but the integrity impact is concrete - an attacker can overwrite or remove .html files anywhere the TYPO3 web process has write access.
Path traversal in SKYSEA Client View and SKYMEC IT Manager enables a locally-authenticated Windows user to execute arbitrary code on remote Windows systems running the same software via UDP communication channels. This is an incomplete-fix bypass of CVE-2024-41726, reported by JPCERT/CC, meaning the original remediation failed to neutralize all traversal variants. No public exploit has been identified at time of analysis, but the subsequent-system impact is maximal (SC:H/SI:H/SA:H per CVSS 4.0), indicating full lateral compromise potential within enterprise environments deploying these management agents.
Lateral code execution via path traversal in SKYSEA Client View and SKYMEC IT Manager allows a low-privileged user authenticated to one Windows host running the software to execute arbitrary code on other Windows hosts where the product is installed, provided those targets are reachable via UDP. The vulnerability (CWE-22) is a bypass of the incomplete patch for CVE-2024-41726, meaning prior remediation efforts are insufficient. No public exploit code or CISA KEV listing has been identified at time of analysis, but the RCE-class impact on subsequent systems - reflected in CVSS 4.0 SC:H/SI:H/SA:H - makes this a meaningful lateral movement risk in enterprise environments running SKY Co. products.
Path traversal in peerigon unzip-crx and unzip-crx-3 (versions up to 0.2.0) enables a local, low-privileged attacker to write extracted archive files outside the intended destination directory by supplying a crafted path argument to the unzip() function. A publicly available proof-of-concept exploit exists via the GitHub issue tracker, and no vendor patch has been released as the project has not responded to the disclosure. The integrity impact is limited to arbitrary file placement on the local filesystem within the privileges of the invoking process.
Arbitrary file write in Adminer 5.3.0-5.4.2 allows any authenticated user to write attacker-controlled content to arbitrary writable filesystem paths via path traversal in the ns parameter of the sql-log plugin. The written files are constrained to a .sql extension, which limits but does not eliminate the integrity impact - an attacker can overwrite existing .sql files, pollute backup directories, or write large files to fill disk. No public exploit code or CISA KEV listing has been identified at time of analysis, and the attack surface is narrowed by both the authentication requirement and the non-default plugin dependency.
Path traversal in Faveo Helpdesk versions 2.0.0 through 2.0.3 enables remote authenticated administrators to delete arbitrary files on the server by manipulating the `data1` argument passed to PHP's `unlink()` function within the Logo Handler component (`SettingsController.php`). Exploitation is limited to accounts holding high privileges, constraining realistic impact despite network reachability. Publicly available exploit code exists via a GitHub issue report; the vendor has not responded to the disclosure as of time of analysis.
Directory traversal in DrayTek VigorSwitch's getSyslogFile web management function exposes arbitrary device filesystem files to authenticated administrators who supply crafted path traversal sequences in the option parameter. Twenty-eight VigorSwitch managed-switch models across the G, P, Q, PQ, FX, and PX product lines are confirmed affected, with firmware versions fixed at 2.9.10, 2.10.6, 2.10.7, 3.9.10, and 3.10.6 depending on the model. No public exploit code has been identified at time of analysis and this CVE is absent from the CISA KEV catalog, but vendor-released patches are available and should be prioritized given the breadth of affected hardware.
Header injection via structured-mode CloudEvents in Apache Camel's Knative consumer enables unauthenticated SSRF, path traversal, and message-dispatch redirection against routes that forward to header-driven components. The flaw exists because CloudEvent extension fields in structured content mode (Content-Type: application/cloudevents+json) are copied directly into Camel Exchange headers without applying the KnativeHttpHeaderFilterStrategy that correctly guards the binary content-mode path - an incomplete fix of the same filter-bypass pattern addressed across multiple related CVEs (CVE-2025-27636, CVE-2025-29891, CVE-2025-30177, CVE-2026-40453, CVE-2026-47323). No public exploit or CISA KEV listing has been identified at time of analysis, but the attack surface - unauthenticated HTTP POST to a Knative endpoint - requires no special tooling.
Path traversal in Apache Camel's camel-azure-storage-datalake component allows anyone with write access to a consumed Azure Data Lake Storage Gen2 filesystem to direct the Camel process to write or overwrite files at arbitrary locations on the local filesystem. The downloadToFile operation constructs local paths by joining the configured fileDir with the remote file name exactly as returned by the Azure SDK - without lexical normalization or any boundary check - meaning a remote path name containing parent-directory segments (e.g., '../../etc/cron.d/payload') resolves outside fileDir. Depending on what the Camel process can write, this integrity violation can escalate to code execution or service disruption. No active exploitation has been identified at time of analysis, and vendor-released patches are available in versions 4.14.9, 4.18.4, and 4.22.0.
Path traversal in achorein expo-share-intent up to version 8.0.0 allows a local attacker to write files outside the intended cache directory by supplying a crafted `_display_name` value during Android file sharing operations. The `getDataColumn` function in `ExpoShareIntentModule.kt` constructed file paths directly from the unvalidated content-provider display name, enabling directory escape via sequences such as `../../`. No public exploit code has been identified and this vulnerability is not listed in CISA KEV; a vendor-released patch (v8.0.1) resolves the issue.
Directory traversal in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin (all versions ≤ 4.9.8) allows subscriber-level authenticated attackers to read arbitrary server files via the get_image_src_in_base64 function. The exfiltration channel is particularly stealthy: base64-encoded file contents are embedded into cached invoice HTML and retrieved through the plugin's own legitimate Print/Download endpoints using only a valid nonce and access key, potentially bypassing WAF rules that inspect request paths. No public exploit or CISA KEV listing is identified at time of analysis; however, the trivially low privilege bar - any registered WooCommerce customer qualifies - combined with high-value targets like wp-config.php credentials makes this an operational priority for any public-facing WooCommerce store.
Symlink-based arbitrary file read in NLTK's IPIPANCorpusReader exposes files accessible to the running process on systems where untrusted local users can write to corpus root directories. Affected NLTK versions before 3.10.2 fail to follow symlinks through the nltk.pathsec validation layer when IPIPANCorpusReader methods - channels(), domains(), categories(), or fileids() - resolve filenames, allowing the symlink target to be read instead of the intended corpus file. No public exploit or CISA KEV listing has been identified at time of analysis; real-world risk is bounded by the local attack vector and the requirement for write access to the corpus directory.
Path traversal in NLTK's CrubadanCorpusReader (versions 3.9.4 through 3.10.2) allows an attacker who controls a malicious corpus package to read arbitrary file contents outside the corpus root directory via the lang_freq interface. The vulnerability arises because _load_lang_ngrams bypasses NLTK's pathsec containment by calling the builtin open() instead of the pathsec-validated opener, enabling os.path.join to silently discard the corpus root prefix when an absolute path is supplied as the crubadan_code value. No public exploit exists and no KEV listing is present; a vendor patch is available in 3.10.3.
Arbitrary file read in the Tutor LMS WordPress plugin (all versions before 4.0.6) allows authenticated instructors to retrieve any file on the server — including files outside the web root — by exploiting a missing path validation check in the plugin's media streaming functionality. Critically, readable targets include wp-config.php, which exposes database credentials and WordPress authentication keys and salts; possession of these constants enables an attacker to forge valid session cookies for any account, including site administrators. No public exploit has been identified at time of analysis, and the EPSS score of 0.18% (8th percentile) reflects low observed exploitation activity, but the cascading impact path from instructor account to full site compromise makes patching urgent for any site with open instructor registration.
Infracost's template engine prior to v0.10.45 allows repository-controlled symlinks to escape the checkout directory, enabling any contributor with repository write access to read files accessible to the CI/CD runner. The vulnerable template functions - readFile, pathExists, isDir, and matchPaths in internal/config/template/parser.go - relied on lexical filepath.Abs normalization and leaf-only os.Lstat checks that failed to resolve intermediate directory symlinks, so a path like evil/secret passes validation while physically exiting the repository root. Captured file contents are rendered into Infracost configuration output and surfaced via the Infracost dashboard or pull request comments; no public exploit identified at time of analysis, and vendor-released patch is confirmed in v0.10.45.
Symlink-following arbitrary file write in ONNX's save_external_data function (onnx/external_data_helper.py) allows a local attacker with write access to a shared directory to redirect a victim's model serialization writes to any file the victim can modify — including ~/.ssh/authorized_keys, cron entries, and application configuration files. All ONNX releases up to and including 1.20.1 (pip/onnx) are affected; the vendor-released patch is 1.21.0. Publicly available exploit code is confirmed via the GHSA advisory, and CISA has published a CSAF advisory (va-26-233-01) covering this issue, indicating heightened government-sector awareness.
Unauthenticated arbitrary directory listing in the Gallery element of the YOOtheme Zoo extension for Joomla exposes server-side directory structures to any remote, unauthenticated attacker on sites running Zoo versions prior to 4.1.66. The path traversal vulnerability (CWE-22) allows crafted requests to enumerate directories outside the intended scope of the Gallery element, potentially revealing sensitive filesystem layout including configuration paths, user data directories, or other installed components. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Path traversal in the `apport-unpack` utility of Canonical Apport enables arbitrary file creation and overwrite by exploiting attacker-controlled key names embedded in crafted crash report files. Affected versions span all Apport releases before 2.28.4, 2.34.2, and 2.36.0 - software that ships by default with Ubuntu desktop and server editions. An attacker who delivers a malicious `.crash` file and induces a user or automated pipeline to unpack it can write files to any location accessible by the executing user, creating a realistic privilege-escalation primitive on multi-user or developer Ubuntu systems. No public exploit is identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Path traversal in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 enables remote, unauthenticated attackers to bypass directory-based access controls by supplying manipulated pathname inputs that escape restricted filesystem boundaries. The vulnerability carries a CVSS 3.1 score of 4.8 (Medium) with high attack complexity (AC:H), which constrains opportunistic exploitation while still leaving targeted attacks viable without requiring credentials. No public exploit code or active exploitation has been identified at time of analysis; IBM has published an advisory at their support portal (https://www.ibm.com/support/pages/node/7283858).
Path traversal in Apple's open-source container runtime (versions before 1.2.0) enables a malicious builder peer to request host files by crafted names that resolve outside the build context, leaking arbitrary host filesystem contents. The CVSS vector (AV:N/AC:L/PR:L) indicates network-accessible exploitation by a low-privileged builder peer with no user interaction required. No active exploitation has been identified (no CISA KEV listing), and SSVC rates exploitation as none and automatability as no, reducing immediate operational urgency.
Authenticated path traversal in Winter CMS's LESS compilation pipeline allows backend users holding any of four specific permissions to exfiltrate arbitrary files readable by the PHP process - most critically the application .env file containing APP_KEY and database credentials. The vulnerability affects Winter CMS versions through 1.2.12 via four injection sinks: Brand Settings, Editor Settings, Mail Brand Settings colour fields, and theme CSS assets compiled by CombineAssets. No public exploit identified at time of analysis and no active exploitation confirmed, but confidentiality impact is high given .env disclosure enables full application key compromise.
Path traversal in Cesanta Mongoose's SSI processing allows an authenticated network attacker to read arbitrary files accessible to the Mongoose process by embedding directory traversal sequences in #include file or #include virtual SSI directives. The mg_ssi() function in src/ssi.c constructs filesystem paths from directive arguments without invoking the existing mg_path_is_sane() validation, bypassing the only guard against traversal. Exploitation is constrained to deployments compiled with MG_ENABLE_SSI and a configured ssi_pattern; no public exploit has been identified at time of analysis.
Path traversal during backup restore in Velero (vmware-tanzu/velero) allows an attacker who has compromised the object storage backend to overwrite arbitrary files on the Velero pod filesystem by uploading a malicious tarball containing filenames with directory traversal sequences. Targeted files include /etc/cron.d/ entries (enabling code execution within the pod), ~/.ssh/authorized_keys (enabling persistent SSH access), and ~/.kube/config (enabling full Kubernetes cluster credential theft). No patch had been released at the time of advisory publication, though fix version 1.18.1 is indicated in package metadata, suggesting the fix was released shortly after disclosure. No public exploit code or CISA KEV listing identified at time of analysis.
Path traversal in VictoriaMetrics vmrestore (prior to versions 1.122.25, 1.136.12, and 1.146.0) allows an attacker who controls or can modify a remote backup source - S3, GCS, Azure Blob Storage, or equivalent - to plant dot-dot sequences in object names, causing vmrestore to write restored files outside the configured -storageDataPath directory when an operator executes a restore operation. The CVSS Scope Changed metric (S:C) reflects that successful exploitation reaches beyond the vmrestore process boundary to the broader host filesystem, enabling potential overwrite of binaries, configuration, or credentials within the OS permissions of the process. Vendor-released patches are available across three maintained branches; no active exploitation has been identified at time of analysis.
Path traversal in the Banks Python prompt-template library (all versions prior to 2.4.5) allows a low-privileged attacker to write arbitrary bytes to attacker-chosen filesystem paths accessible to the application process. DirectoryPromptRegistry.set() in directory.py constructs on-disk paths by directly interpolating unvalidated Prompt.name and Prompt.version values - enabling relative sequences like ../victim/foo or absolute paths to escape the configured registry root. The poisoned path persists in index.json and is reconstructed on subsequent registry loads, meaning exploitation survives application restarts. No public exploit or CISA KEV listing exists at time of analysis; a vendor-released patch is available as version 2.4.5.
Path traversal in ATutor's error log viewer grants authenticated administrators read access to arbitrary files outside the intended logs directory, up to the web server process's permission boundary. Only version 2.2.4 has been confirmed vulnerable by CERT.pl, though other versions may also be affected. No patch will be issued - the product is end-of-life - making migration or decommissioning the only durable remediation.
Path traversal in ATutor 2.2.4 enables an authenticated low-privilege user to read files belonging to other course directories when the AT_FORCE_GET_FILE configuration option is active, leaking file contents and exposing filesystem structure. The product is end-of-life with no vendor-released patch, making remediation dependent entirely on compensating controls or decommissioning. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Direct HTTP access to an exposed SQL database backup file in code-projects Login Registration System 1.0 allows unauthenticated remote attackers to download the raw database dump at /loginsystem/database/login_registration_system.sql, disclosing user credentials, schema details, and any sensitive data stored in the application database. This is a CWE-552 file exposure defect - the backup artifact is stored within the web-accessible document root with no access controls. No exploitation beyond a standard HTTP GET request is required. A public proof-of-concept exploit exists; no KEV listing at time of analysis.
Path traversal in Splunk SOAR below 8.6.0 enables users holding the OnPrem Broker role to write files to arbitrary locations outside the designated Automation Broker log directory. The flaw stems from the log upload endpoint accepting crafted filenames without adequate sanitization, allowing directory traversal sequences to escape the intended write boundary. No public exploit has been identified and no active exploitation is confirmed; the CVSS score of 2.7 (Low) accurately reflects the high privilege prerequisite and the limited, integrity-only impact.
Path traversal in Splunk SOAR's Universal Forwarder credentials-package extraction allows an authenticated Administrator to write files to arbitrary locations on the underlying host filesystem. Affecting all On-premises versions below 8.6.0, the flaw stems from the archive extraction workflow accepting member paths containing directory traversal sequences without first verifying each member's resolved destination. No public exploit or CISA KEV listing exists at time of analysis; however, the Integrity:High and Availability:High CVSS impact ratings indicate that a malicious archive could overwrite system-level files, enabling persistence or privilege escalation beyond SOAR's own permission boundary.
Path traversal during app installation in Splunk SOAR On-premises below version 8.6.0 allows an authenticated user holding app-install privileges to write files outside the intended temporary extraction directory. The archive extraction routine fails to validate that file paths within an uploaded archive remain within the designated staging directory, enabling a classic Zip Slip attack that can overwrite arbitrary files on the host. No public exploit has been identified at time of analysis, and exploitation is constrained by the high-privilege prerequisite (PR:H); a vendor-released patch is available in version 8.6.0.
Path traversal in Splunk Enterprise exposes JavaScript files outside the Splunk Web static directory to unauthenticated remote attackers across four active release branches. Splunk Web fails to enforce boundaries on static file requests, allowing directory traversal reads without any credentials. No public exploit code has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog, but the trivially low attack complexity (AC:L, PR:N, UI:N) means exploitation requires no special tooling.
Arbitrary code execution in IBM OpenBMC FW1060.00 through FW1060.80 is achievable via a path traversal flaw (CWE-22) in the BMC firmware update process, resulting in full confidentiality, integrity, and availability compromise of the baseboard management controller. Exploitation is constrained to authenticated administrators with adjacent network access to the BMC management interface, substantially limiting the real-world attack surface despite the high CIA impact. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Path traversal in RuoYi-Vue up to 3.9.2 allows authenticated low-privilege users to read arbitrary files from the server filesystem by manipulating the `fileName` or `resource` parameters of the Common Download Endpoint in `CommonController.java`. A publicly available exploit has been disclosed via GitHub issue, but no patch has been released and the maintainer has not responded to the disclosure. No CISA KEV listing is present, so confirmed active exploitation at scale is unverified, though the public POC and low attack complexity make opportunistic exploitation by authenticated insiders or compromised accounts a realistic near-term risk.
Path traversal in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 exposes sensitive files to remote, unauthenticated attackers over the network. The flaw (CWE-22) allows directory traversal sequences to escape an intended path boundary, enabling read access to files that should not be externally accessible. No active exploitation has been confirmed by CISA KEV, and no public exploit code has been identified at time of analysis.
CPython's tarfile module on POSIX platforms creates empty directories outside the intended extraction destination when processing archive members whose names temporarily escape and re-enter it, such as '../evil/../dest/sub/file'. The extraction filters ('tar' and 'data') validate the resolved path - which correctly resolves to inside the destination - but create intermediate directories from the raw member name as given, allowing filesystem pollution beyond the extraction boundary. File contents are never placed outside the destination, and no public exploit has been identified at time of analysis; the PSF advisory confirms the limited scope.
Path traversal in OpenEMR's EDI archive restore function before version 8.3.0 enables authenticated users with EOB Data Entry permissions to enumerate arbitrary filesystem paths on the server via a differential response oracle. The unsanitized `archrestore_sel` POST parameter is passed directly to the archive restore handler, which checks the resolved path against the filesystem and returns distinct messages depending on whether the path exists - leaking file existence without disclosing file contents. No public exploit has been identified at time of analysis, and a vendor-released patch is available in OpenEMR 8.3.0.
Unauthenticated path traversal in Ground Station before v0.4.13 allows remote attackers to read arbitrary JSON-parseable files outside the intended recordings directory via the Socket.IO configure-sdr command. The sigmf-playback SDR type accepts an unsanitized recordingPath parameter that is stored verbatim and later opened by the sigmfprobe backend, enabling absolute-path or directory-traversal payloads to escape backend/data/recordings and return file contents to the caller. No public exploit has been identified at time of analysis; a vendor-released patch exists as of version 0.4.13.
Path traversal in Dell OpenManage Enterprise prior to version 4.7.0 allows a remote low-privileged attacker to read files outside the intended directory scope, resulting in information exposure. The vulnerability is classified under CWE-22 and carries a CVSS 3.1 base score of 6.5 (Medium), with high confidentiality impact and no integrity or availability impact. No public exploit code or active exploitation has been identified at time of analysis.
Arbitrary root-readable file disclosure in Linuxfabrik Monitoring Plugins prior to 7.0.0 allows a local attacker controlling the monitoring account to exfiltrate sensitive files such as /etc/shadow by supplying a crafted --filename path to the logfile check plugin, which executes as root via the shipped sudoers allowlist without confining the resolved path to /var/log. The same path-traversal flaw extends to the mysql-logfile and openvpn-client-list plugins. No public exploit code or CISA KEV listing has been identified at time of analysis, but the attack is straightforward and requires only monitoring-account-level access.
Path traversal in Confidential Containers guest-components (image-rs) versions 0.16.0 through 0.19.x allows a workload owner to create hardlinks outside the OCI layer destination directory and into arbitrary absolute paths within the pod virtual machine. The root cause is Rust's standard library behavior where `Path::join()` silently discards the base path when the right-hand operand is absolute, allowing a crafted tar entry to bypass directory confinement in `try_hardlink_fallback()`. While this does not cross the image trust boundary - the workload owner already controls trusted image content - it enables escape into pod VM capabilities and potential attestation abuse; no public exploit code has been identified at time of analysis.
Arbitrary root file read in Linuxfabrik monitoring plugins allows a local attacker controlling the nagios or icinga account to exfiltrate any root-readable file by exploiting the hidden but permanently live --test argument accepted by all sudoers-whitelisted check plugins. Invoking the deb-updates plugin via sudo with --test=/etc/shadow,,0 causes lftest.py to read the supplied path as root with no path confinement and echo its full contents to stdout; approximately 22 additional whitelisted plugins yield filtered leaks or file-existence oracles through the same mechanism. No active exploitation has been confirmed by CISA KEV, but a fully functional proof-of-concept command is publicly disclosed in the vendor's own GitHub security advisory GHSA-rh9c-rqvg-f7pr, and patches are available in linuxfabrik-lib v6.1.0 and monitoring-plugins v7.0.0.
Path traversal in Blueprint Studio prior to 2.5.2 allows an authenticated Home Assistant administrator to escape the intended configuration directory boundary via the legacy terminal command execution path. By supplying an arbitrary `cwd` working-directory parameter, the administrator can direct terminal commands to any host path accessible to the Home Assistant container process, reading or modifying files outside the HA config root. No public exploit identified at time of analysis; the CVSS 4.0 score of 5.1 reflects the high privilege requirement (PR:H), and exploitation is strictly bounded by container filesystem permissions.
Absolute path traversal in NVIDIA Triton Inference Server for Linux exposes arbitrary filesystem files to low-privileged local attackers, with the vendor flagging potential code execution as a secondary consequence. The vulnerability is classified under CWE-36 and affects all versions captured by the wildcard CPE, meaning no upper-bound patched version is confirmed from current data. No public exploit code has been identified and this CVE does not appear in the CISA KEV catalog at time of analysis, though the discrepancy between the RCE tag and the CVSS confidentiality-only impact metrics leaves the true blast radius unresolved.
Arbitrary file read via path traversal in MobSF prior to 4.5.1 allows authenticated users with scan-upload permissions to exfiltrate server-side files by embedding traversal sequences in the android:icon attribute of a crafted AndroidManifest.xml inside a ZIP or APK upload. The vulnerable find_icon_path_zip() function resolves the attacker-controlled icon path without containment checks, copies the target file to a predictable location in DWD_DIR, and exposes it through the /download/ endpoint. A fully functional proof-of-concept script is publicly available in the GHSA advisory; this issue is not listed in the CISA KEV catalog.
Arbitrary file write in Trivy's plugin manager prior to version 0.72.0 allows a malicious plugin author to escape the confines of ~/.trivy/plugins and write files to any user-writable filesystem path. The flaw exists in pkg/plugin/manager.go, where plugin manifest metadata is used to construct file paths without enforcing directory confinement, enabling a path traversal (CWE-22) attack. No public exploit has been identified and no CISA KEV listing exists, but the attack is mechanically simple and the impact extends to overwriting sensitive user files such as shell profiles or SSH authorized_keys, creating realistic subsequent privilege escalation paths.
Arbitrary file download via path traversal in the CTX Feed WordPress plugin (versions <= 6.6.47) exposes server-side files to authenticated shop managers. The vulnerability (CWE-22) allows a WooCommerce shop manager to craft requests that traverse directory boundaries and retrieve arbitrary files - including sensitive configuration files such as wp-config.php - directly from the web server. No public exploit code or active exploitation has been identified at time of analysis, but the confidentiality impact is complete given successful exploitation.
Unauthenticated path traversal in reportico-web <= 8.1.0 allows remote attackers to expose PHP source files or execute existing PHP files on the server by manipulating the target_format parameter of the run.php endpoint combined with the execute_mode=EXECUTE directive. The vulnerability requires no authentication and is reachable over the network, meaning any internet-exposed instance is at risk. Publicly available exploit research exists (kilotel/vulnerability-research); no public exploit identified as confirmed actively exploited (CISA KEV). EPSS stands at 0.37% (30th percentile), suggesting low observed exploitation frequency at time of analysis.
Path traversal in JumpServer's KoKo Web Terminal SFTP component (versions 4.8.0 through 4.10.16) allows authenticated users holding SFTP asset permissions to escape the intended SFTP root directory sandbox. The root cause is insufficient path normalization in AssetDir.GetRealPath() (pkg/srvconn/sftp_asset.go), where a naive strings.HasPrefix boundary check is applied before path cleaning, enabling crafted traversal sequences to bypass the root confinement. A low-privileged authenticated attacker can read, list, write, rename, or delete files accessible to the configured backend account on the managed asset, potentially exposing credentials and configuration data beyond the intended access scope. No active exploitation is confirmed and no public exploit has been identified at time of analysis; vendor-released patch 4.10.17 is available.
Arbitrary file read in Hugging Face Transformers allows an attacker who controls a model checkpoint index file to exfiltrate files from the host filesystem outside the intended model directory. The library fails to sanitize shard filenames in checkpoint index files before joining them to directory paths, meaning maliciously crafted entries containing parent-directory sequences or absolute paths resolve to unintended locations. Any user or automated pipeline that loads an attacker-supplied checkpoint - for example, by downloading a model from an untrusted Hub repository - can have host files disclosed without code execution. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Path traversal in Notepad++ before version 8.9.7 enables local attackers with write access to the user's profile directory to read arbitrary user-readable files outside the designated backup folder by poisoning session.xml. The backupFilePath attribute is validated with std::wstring::starts_with against the expected backup directory prefix but without prior path normalization, allowing dot-dot sequences to bypass the check during snapshot-mode session restoration and load an out-of-bounds file into an editor tab. No public exploit code or active exploitation has been identified at the time of analysis; the vendor released a confirmed fix in version 8.9.7.
Path traversal in ApostropheCMS's import-export module (versions prior to 3.6.2) allows an authenticated contributor to exfiltrate host files and expose them publicly via the CMS uploads URL. By importing a crafted `.tar.gz` archive with `../` sequences embedded in the `_id`, `name`, or `extension` fields of `aposAttachments.json`, an attacker causes the module to reconstruct a source path that escapes the extraction directory, reading any host file whose name ends with an allow-listed extension and copying it to a publicly accessible, unauthenticated uploads endpoint. No public exploit is identified at time of analysis; vendor-released patch is available in version 3.6.2.
Path traversal in uniget CLI's hook filename handling exposes arbitrary local filesystem files to any user able to invoke the `uniget hooks edit` or `hooks remove` subcommands, affecting all releases prior to v0.27.6. The root cause in hooks.go is direct string concatenation of the unsanitized `args[0]` value with `preInstallHooksDir`, allowing `../` sequences to escape the designated hooks directory entirely. A publicly available proof-of-concept included in GHSA-m6jg-wr9m-cg2f demonstrates reading `/etc/passwd` in a single command; no public exploit is independently weaponized and the vulnerability is not listed in CISA KEV, but the PoC lowers the exploitation bar substantially for anyone with CLI access.
Arbitrary file deletion in Terragrunt before v1.0.4 allows an attacker who controls a remote module source to delete any file accessible to the Terragrunt process by embedding directory traversal paths in a forged `.terragrunt-module-manifest` file within the module. The deletion occurs automatically during the module download and initialization phase - before OpenTofu or Terraform executes - making CI/CD pipelines that consume external modules particularly exposed. No public exploit has been identified and no CISA KEV listing exists; a vendor-released patch is available in v1.0.4. Note: an 'RCE' tag in the source metadata directly contradicts the vendor advisory's explicit statement that this is a deletion-only primitive with no code execution or data exfiltration capability.
Path traversal in Microsoft Kiota's AI plugin manifest generator allows an attacker who controls or tampers with the OpenAPI description input to inject percent-encoded file references - including double-encoded sequences, NUL-byte payloads, and Unicode full-width homoglyphs - that bypass the IsSafeFileReference validator and are written verbatim into the generated plugin manifest. When an AI host deploys and resolves the manifest, it can access files outside the intended package boundary, leading to disclosure of sensitive files such as /etc/passwd. The vulnerability affects nuget/Microsoft.OpenApi.Kiota versions prior to 1.29.1 and 1.30.0 through 1.33.x; no public exploit or active exploitation is confirmed at time of analysis.
Path traversal in Dell ObjectScale before version 4.3.0.1 enables a local, low-privileged attacker to read files outside the intended directory scope, resulting in partial information disclosure. The CVSS 3.3 (Low) score reflects the constrained attack surface - local authenticated access and an existing low-privileged account are prerequisites, and impact is limited to confidentiality with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis.
Directory traversal in the Kirki WordPress plugin (all versions through 6.1.1) allows authenticated attackers with editor-level access to read arbitrary files on the server by exploiting a flawed strpos()-based path validation guard in the plugin's AJAX ExportImport handler. By crafting a 'data' parameter value that embeds the uploads directory path as a substring while appending directory traversal sequences, an attacker can escape the intended upload directory restriction and retrieve sensitive files such as wp-config.php containing database credentials and secret keys. No active exploitation has been confirmed and no CISA KEV listing exists; the CVSS score of 4.9 (Medium) reflects the high privilege requirement, though the confidentiality impact is rated High due to the severity of files that can be exposed as a precursor to full site compromise.
Directory traversal in the StoreEngine WordPress plugin (Kodezen) through version 2.1.1 exposes arbitrary server files to authenticated users holding vendor-level access or higher. The flaw resides in the `parse_file_path` function, which insufficiently sanitizes file path input across the plugin's download handler and multi-vendor addon components, allowing path sequences to escape the intended directory. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, but the confidentiality impact is high given that readable files may include WordPress configuration, database credentials, or private keys.
Unauthenticated path traversal in the token-optimizer-mcp dashboard server (npm package @ooples/token-optimizer-mcp v5.0.1) allows any network-accessible attacker to read arbitrary .jsonl files from the server's filesystem by supplying a crafted sessionId parameter to /api/session-summary or /api/session-events. The CVSS vector (PR:N, AV:N, AC:L, UI:N) confirms zero authentication or user interaction is required, and a working proof-of-concept demonstrating successful out-of-bounds file exfiltration has been publicly disclosed in GHSA-76pc-mqxp-3rq5. No active exploitation has been confirmed by CISA KEV, but the trivial exploitation complexity and public PoC make this an immediate priority for any internet-exposed deployment.
Path traversal in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 exposes sensitive filesystem content to remote authenticated attackers via improper validation of user-supplied file paths. The CVSS 6.5 score (AV:N/AC:L/PR:L/UI:N) reflects network-accessible, low-complexity exploitation requiring only a low-privileged account, with high confidentiality impact and no integrity or availability loss. No active exploitation is confirmed (not listed in CISA KEV), no public proof-of-concept has been identified, and EPSS data was not present in the available intelligence.
Path traversal in KUNBUS RevPiPyLoad 0.11.0 enables local users to delete arbitrary files through the XML-RPC management interface without authenticating to the service, exploiting the daemon's own filesystem privileges via crafted requests. Discovered and reported by Nozomi Networks Labs, the flaw allows an attacker to corrupt configuration files or trigger denial of service on Revolution Pi industrial controllers, with integrity and availability impact classified as high. No public exploit code has been identified at time of analysis, and the product is not listed in the CISA KEV catalog.
Path traversal in KUNBUS RevPiPyLoad 0.11.0 exposes arbitrary file read via the XML-RPC management interface, allowing a local attacker to access sensitive files at daemon-level privileges. Nozomi Networks Labs discovered that the file management functionality of the local management service fails to sanitize directory path input before serving files, enabling escape from the intended file access scope. No public exploit code or CISA KEV listing exists at time of analysis; however, successful exploitation yields high confidentiality impact including potential exposure of credential material and configuration files critical to ICS environments.
Path traversal in Logback-classic versions 0.9.14 through 1.6.2 enables a remote unauthenticated attacker to create and append log files at arbitrary filesystem locations by injecting traversal sequences into an MDC (Mapped Diagnostic Context) value that flows unsanitized into a nested FileAppender path. Deployments using MDC-based discriminators - a pattern frequently triggered by HTTP header values automatically stored in MDC by web frameworks - are directly at risk. No public exploit code or active exploitation has been confirmed at time of analysis; vendor fix notes reference version 1.6.3 as the remediated release.
Path traversal in wvp-GB28181-pro 2.7.4-20260107 exposes arbitrary server-side files through the Log File Download Endpoint in LogController.java, where the unsanitized `fileName` parameter allows directory escape sequences to be supplied by authenticated remote attackers. A public proof-of-concept exploit has been released per the CVSS 4.0 supplemental metric (E:P) and VulDB submission, lowering the bar for exploitation. Impact is limited to low-severity confidentiality loss with no integrity or availability effects, consistent with the CVSS 4.0 score of 2.1 and a PR:L/VC:L vector.
Path traversal in wvp-GB28181-pro 2.7.4-20260107 exposes arbitrary server files through the Snapshot Endpoint in PlayController.java, where the deviceId and channelId parameters are incorporated into file system operations without sanitization. Authenticated remote attackers with low-privilege access can escape the intended snapshot directory by injecting traversal sequences into these parameters, yielding partial confidentiality, integrity, and availability impact. A publicly available proof-of-concept exploit exists on GitHub (issue #2175), materially lowering the barrier to exploitation despite the moderate CVSS 5.3 score and absence from the CISA KEV catalog.
Path traversal in AllData up to version 0.6.8 enables remote unauthenticated attackers to read arbitrary files from the server filesystem via the logDetailCat endpoint. The executorAddress parameter is passed unsanitized to FileInputStream in JobLogController.java, allowing directory traversal sequences to escape the intended file access boundary. A public exploit has been published on GitHub; no patch exists and the vendor has permanently declined to fix the issue by closing the bug report as 'not planned.'
Path traversal in Grav CMS backup profile validation exposes arbitrary server files to authenticated users with profile editor privileges. All Grav versions before 2.0.13 fail to canonicalize or allowlist backup profile root paths, relying instead on an insufficient hard-coded deny-list, allowing traversal sequences such as '../../opt' to be accepted. An attacker holding a profile editor account can configure a malicious backup profile, trigger a backup job, and download an archive containing sensitive files from directories like /opt, /mnt, or /srv that reside entirely outside GRAV_ROOT. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Path traversal in the actix-files Rust crate (versions 0.6.9 and earlier) exposes arbitrary files from the application's working directory to unauthenticated remote attackers. When `Files::new()` receives a non-existent `serve_from` directory, the library silently substitutes an empty base path; subsequent requests join attacker-supplied filenames against this empty root, which Rust's `canonicalize()` resolves relative to the process working directory, enabling direct file disclosure. A publicly available proof-of-concept exploit exists; no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Path traversal in DTStack Taier 1.4.0's UploadController allows privileged remote attackers to write files outside the intended upload directory by supplying a crafted filename containing sequences such as '../' or absolute paths. The commit diff confirms that `MultipartFile.getOriginalFilename()` output was concatenated directly into a filesystem path without any sanitization before the fix. The CVSS 4.0 PR:H rating constrains exploitation to authenticated high-privilege users; no public exploit code or CISA KEV listing exists at time of analysis.
Path traversal in dromara lamp-cloud (versions up to 5.10.0) exposes the chunk-check endpoint of FileChunkController.java to remote directory traversal via a crafted 'Name' argument, potentially allowing attackers to read or write files outside the intended upload directory. No authentication is required per the CVSS 4.0 vector (PR:N), and a public exploit has been disclosed (CVSS E:P modifier), lowering the barrier for opportunistic exploitation. The vendor was notified via GitHub issue #413 but has not yet responded, leaving no official patch available at time of analysis.
Path traversal in Dromara lamp-cloud up to version 5.10.0 allows remote unauthenticated attackers to manipulate file storage paths via the bucket and bizType parameters in FileAnyoneController.java. The affected endpoint appears intentionally public (indicated by the 'Anyone' controller name), lowering the bar for exploitation significantly. No vendor patch is available at time of analysis, and a public proof-of-concept exploit exists, though no CISA KEV listing confirms active mass exploitation.
Path traversal in DTStack Taier 1.4.0 allows an authenticated administrative user to supply a crafted clusterName containing directory-escape sequences during cluster creation, causing FileUtils.deleteDirectory to operate on arbitrary filesystem paths outside the intended temp directory. The CVSS 4.0 score of 5.1 with PR:H reflects the constrained attack surface: only users with cluster management privileges can trigger the flaw. No public exploit code or CISA KEV listing exists at time of analysis.
Path traversal in DTStack Taier 1.4.0's Chunk-Check Endpoint exposes the server's filesystem to remote unauthenticated attackers who can manipulate the Name parameter in FileChunkController.java to escape the intended upload directory. The Java Paths.get() function processes attacker-controlled input without sanitization, enabling directory traversal sequences to reference arbitrary files accessible to the Taier process. A public proof-of-concept exploit is available via GitHub issue #1203, and no exploitation confirmation from CISA KEV exists at time of analysis.
Path traversal in Dromara lamp-cloud's Code Generator component (DefGenProjectController.java), affecting all versions up to 5.10.0, enables authenticated remote attackers to manipulate the `outputDir`, `parent`, and `projectPrefix` parameters to read or write files outside the application's intended output directory. A proof-of-concept exploit has been publicly disclosed (confirmed by CVSS 4.0 supplemental metric E:P), and no vendor patch is available at time of analysis as the project maintainer has not responded to the responsible disclosure submitted via GitHub issue. The attack requires low-privileged authenticated access, which bounds real-world risk but does not eliminate it in multi-user development or DevOps platforms.
Cross-tenant run replay in Trigger.dev 4.4.2-4.5.0-rc.3 allows any authenticated API key holder to replay task runs belonging to other tenants by supplying a victim's run `friendlyId` to the replay endpoint, which performs no tenant isolation check. This unauthorized replay consumes victim compute resources and re-executes side effects such as outbound API calls, webhook triggers, and database writes. A secondary chained code path further allows attacker-controlled payload bytes - planted via a separate object-store path-traversal - to become input to the victim task when `payloadType: application/store` is in use. No public exploit has been identified at time of analysis, and this CVE is not listed in CISA KEV.
Path traversal in IBM i 7.3, 7.4, 7.5, and 7.6 allows a remote authenticated attacker to read sensitive files outside their permitted directory boundaries, resulting in unauthorized information disclosure. The vulnerability carries a CVSS 3.1 base score of 4.3 (Medium) and is limited strictly to confidentiality impact - integrity and availability are unaffected. A vendor-supplied patch is available, and no public exploit code or CISA KEV listing has been identified at time of analysis.
Path traversal in IBM i 7.3 through 7.6 enables remote attackers holding high-privilege credentials to manipulate files outside intended directory boundaries. The CVSS score of 2.7 (Low) accurately reflects the constrained impact - exploitation is limited to authenticated users with high privileges (PR:H), and the resulting damage is restricted to limited file integrity modification with no confidentiality or availability consequences. No public exploit code has been identified at time of analysis, and IBM has released a vendor patch.
Path traversal in IBM i 7.3 through 7.6 allows remote authenticated attackers holding high-privilege accounts to delete arbitrary files outside their intended directory scope. The flaw (CWE-22) results from insufficient sanitization of user-supplied path input in a file management operation reachable over the network. No public exploit code has been identified at time of analysis, and a vendor-released patch is available via the IBM support portal.
CyberPanel versions before 3.0.0 expose a path traversal in the cloudAPI ReadReport endpoint that allows authenticated administrators to read any file accessible by the root-privileged CyberPanel process. The `reportFile` parameter in the JSON request body is passed without sanitization directly to Python's `open()` in `cloudManager.py`, enabling directory traversal to credential files, SSL and SSH private keys, and JWT secrets. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis, though the vulnerability is straightforward to abuse given administrative credentials.
Path traversal in Zimbra Collaboration Suite (ZCS) Briefcase document editing exposes sensitive web application files to authenticated low-privileged users. The vulnerability stems from improper validation of the `packages` parameter, enabling directory escape via crafted traversal sequences. No public exploit code or CISA KEV listing has been identified at time of analysis; the vendor has released a fix in version 10.1.17.
Path traversal in rsync before 3.5.0 allows a malicious sender to write arbitrary files outside the receiver's intended destination directory by exploiting symlink following in --relative mode. The make_path() function creates intermediate directories while following symlinks without enforcing that resolved paths stay within the destination tree boundary, enabling controlled file writes to arbitrary locations on the receiver's filesystem. No public exploit or CISA KEV listing is confirmed at time of analysis, but the CVSS 4.0 score of 6.9 with high integrity and availability impact reflects meaningful real-world risk given rsync's ubiquity in backup and synchronization workflows.
Path traversal in Veno File Manager 4.4.9 exposes arbitrary server files to authenticated super administrators via two crafted HTTP requests targeting /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php. The vulnerability allows directory escape through unsanitized path parameters, enabling disclosure of sensitive files such as configuration files, credentials, or system data accessible to the web server process. A public proof-of-concept repository exists on GitHub (jfs-jfs/CVE-2026-37066), and no public exploit has been confirmed as actively exploited per CISA KEV.
Path traversal in Spring Integration's ZipTransformer allows a low-privileged attacker who controls the file_name message header to write ZIP archive output to arbitrary filesystem paths outside the configured workDirectory. Affected versions span the 6.4.x, 6.5.x, 7.0.x, and 7.1.0 release lines of Spring Integration, and exploitation is viable by default since ZipResultType.FILE is the standard configuration. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Path traversal in ZLMediaKit's downloadFile API allows an authenticated operator holding the API secret to read files from sibling directories outside the configured root, because the root path is built without a trailing separator and the confinement check is a bare prefix comparison. The flaw is isolated to server/WebApi.cpp and does not affect the standard static file server in src/Http/HttpFileManager.cpp. No patch version has been confirmed and no public exploit has been identified at time of analysis, but because the reference container runs as root, a secret-holding attacker can read arbitrary host filesystem content.
Path traversal in RustDesk's macOS clipboard file-paste feature allows a remote session peer to write files outside the intended target directory by supplying crafted file descriptor names containing parent-directory components or absolute paths. Versions 1.3.9 through 1.4.9 on macOS are affected; exploitation requires an active RustDesk session and passive victim interaction (initiating a clipboard paste). No public exploit code and no CISA KEV listing have been identified at time of analysis; a vendor fix is available via commit 6f1eb164.
Path traversal in the Directorist WordPress plugin (versions 8.5 through before 8.9.3) allows subscriber-level authenticated users to relocate arbitrary server-readable image files into a publicly accessible directory and delete them from their original location. The flaw stems from unsanitized user-supplied image references passed directly to a file-move operation, exposing sensitive server files to unauthenticated public access after the move. Publicly available exploit code exists per WPScan reporting; however, EPSS sits at 0.19% (9th percentile), and the requirement for a subscriber-level account limits opportunistic mass exploitation.
Path traversal in rclone's serve s3 command (versions before 1.74.4) allows unauthenticated remote attackers to both read and overwrite files at the serve root directory by embedding dot-dot sequences in S3 object keys. Go's path.Join() in the S3 backend normalizes traversal sequences that the S3 protocol treats as opaque identifiers, so a request like GET /bucket/../root-secret.txt resolves outside the intended bucket scope to a root-level file. A public proof-of-concept is available; no active exploitation has been confirmed in CISA KEV, but the unauthenticated default configuration and low attack complexity make exposed instances high-priority for patching.
Local file inclusion in Winter CMS before 1.2.13 allows authenticated backend users holding the cms.manage_assets permission to exfiltrate arbitrary server-readable files - including .env - by embedding =include or =require path-traversal directives in theme JavaScript assets. The critical escalation is that the resulting combined asset output is served unauthenticated via the public combine/{file} route, meaning a single privileged write operation exposes APP_KEY and database credentials to any unauthenticated visitor. This is the JavaScript-importer counterpart of two prior Winter CMS LFI bugs (GHSA-58fp-mcx6-7qf9, CVE-2023-52085) in the same asset combiner pipeline. No public exploit identified at time of analysis; vendor-released patch available in 1.2.13.
Path traversal in dekdee's adobe-xd-mcp 1.0.0 exposes the server filesystem to remote unauthenticated attackers via unsanitized `outputFile` and `outputDir` parameters in the `file-access-from-request` endpoint of `src/parsers/xd-parser.ts`. A public proof-of-concept exploit is available through the project's GitHub issue tracker, and no patch has been released - the vendor has not responded to the disclosure. With a CVSS 4.0 score of 6.9, public exploit code (E:P), and no mitigating authentication requirement, any network-exposed instance is immediately at risk.
Path traversal in the liketrek TREK Public Journey Photo Proxy controller allows remote attackers - without authentication - to read files outside the intended directory on self-hosted instances running version 3.0.22 or earlier. The affected endpoint (`server/src/nest/journey/journey-public.controller.ts`) fails to adequately sanitize path inputs, exposing server-side files to limited confidentiality disclosure. No public exploit has been identified and the CVE is not listed in the CISA KEV catalog; a vendor-released patch is available in v3.1.0.
Path traversal in the TYPO3 Mask extension allows authenticated backend users with Mask module access to create or delete arbitrary .html files outside the configured template directory. The flaw stems from the extension's failure to validate client-supplied template element keys before using them to construct filesystem paths for saving and deleting Mask template files. No public exploit code or CISA KEV listing has been identified at time of analysis, but the integrity impact is concrete - an attacker can overwrite or remove .html files anywhere the TYPO3 web process has write access.
Path traversal in SKYSEA Client View and SKYMEC IT Manager enables a locally-authenticated Windows user to execute arbitrary code on remote Windows systems running the same software via UDP communication channels. This is an incomplete-fix bypass of CVE-2024-41726, reported by JPCERT/CC, meaning the original remediation failed to neutralize all traversal variants. No public exploit has been identified at time of analysis, but the subsequent-system impact is maximal (SC:H/SI:H/SA:H per CVSS 4.0), indicating full lateral compromise potential within enterprise environments deploying these management agents.
Lateral code execution via path traversal in SKYSEA Client View and SKYMEC IT Manager allows a low-privileged user authenticated to one Windows host running the software to execute arbitrary code on other Windows hosts where the product is installed, provided those targets are reachable via UDP. The vulnerability (CWE-22) is a bypass of the incomplete patch for CVE-2024-41726, meaning prior remediation efforts are insufficient. No public exploit code or CISA KEV listing has been identified at time of analysis, but the RCE-class impact on subsequent systems - reflected in CVSS 4.0 SC:H/SI:H/SA:H - makes this a meaningful lateral movement risk in enterprise environments running SKY Co. products.
Path traversal in peerigon unzip-crx and unzip-crx-3 (versions up to 0.2.0) enables a local, low-privileged attacker to write extracted archive files outside the intended destination directory by supplying a crafted path argument to the unzip() function. A publicly available proof-of-concept exploit exists via the GitHub issue tracker, and no vendor patch has been released as the project has not responded to the disclosure. The integrity impact is limited to arbitrary file placement on the local filesystem within the privileges of the invoking process.
Arbitrary file write in Adminer 5.3.0-5.4.2 allows any authenticated user to write attacker-controlled content to arbitrary writable filesystem paths via path traversal in the ns parameter of the sql-log plugin. The written files are constrained to a .sql extension, which limits but does not eliminate the integrity impact - an attacker can overwrite existing .sql files, pollute backup directories, or write large files to fill disk. No public exploit code or CISA KEV listing has been identified at time of analysis, and the attack surface is narrowed by both the authentication requirement and the non-default plugin dependency.
Path traversal in Faveo Helpdesk versions 2.0.0 through 2.0.3 enables remote authenticated administrators to delete arbitrary files on the server by manipulating the `data1` argument passed to PHP's `unlink()` function within the Logo Handler component (`SettingsController.php`). Exploitation is limited to accounts holding high privileges, constraining realistic impact despite network reachability. Publicly available exploit code exists via a GitHub issue report; the vendor has not responded to the disclosure as of time of analysis.
Directory traversal in DrayTek VigorSwitch's getSyslogFile web management function exposes arbitrary device filesystem files to authenticated administrators who supply crafted path traversal sequences in the option parameter. Twenty-eight VigorSwitch managed-switch models across the G, P, Q, PQ, FX, and PX product lines are confirmed affected, with firmware versions fixed at 2.9.10, 2.10.6, 2.10.7, 3.9.10, and 3.10.6 depending on the model. No public exploit code has been identified at time of analysis and this CVE is absent from the CISA KEV catalog, but vendor-released patches are available and should be prioritized given the breadth of affected hardware.
Header injection via structured-mode CloudEvents in Apache Camel's Knative consumer enables unauthenticated SSRF, path traversal, and message-dispatch redirection against routes that forward to header-driven components. The flaw exists because CloudEvent extension fields in structured content mode (Content-Type: application/cloudevents+json) are copied directly into Camel Exchange headers without applying the KnativeHttpHeaderFilterStrategy that correctly guards the binary content-mode path - an incomplete fix of the same filter-bypass pattern addressed across multiple related CVEs (CVE-2025-27636, CVE-2025-29891, CVE-2025-30177, CVE-2026-40453, CVE-2026-47323). No public exploit or CISA KEV listing has been identified at time of analysis, but the attack surface - unauthenticated HTTP POST to a Knative endpoint - requires no special tooling.
Path traversal in Apache Camel's camel-azure-storage-datalake component allows anyone with write access to a consumed Azure Data Lake Storage Gen2 filesystem to direct the Camel process to write or overwrite files at arbitrary locations on the local filesystem. The downloadToFile operation constructs local paths by joining the configured fileDir with the remote file name exactly as returned by the Azure SDK - without lexical normalization or any boundary check - meaning a remote path name containing parent-directory segments (e.g., '../../etc/cron.d/payload') resolves outside fileDir. Depending on what the Camel process can write, this integrity violation can escalate to code execution or service disruption. No active exploitation has been identified at time of analysis, and vendor-released patches are available in versions 4.14.9, 4.18.4, and 4.22.0.
Path traversal in achorein expo-share-intent up to version 8.0.0 allows a local attacker to write files outside the intended cache directory by supplying a crafted `_display_name` value during Android file sharing operations. The `getDataColumn` function in `ExpoShareIntentModule.kt` constructed file paths directly from the unvalidated content-provider display name, enabling directory escape via sequences such as `../../`. No public exploit code has been identified and this vulnerability is not listed in CISA KEV; a vendor-released patch (v8.0.1) resolves the issue.
Directory traversal in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin (all versions ≤ 4.9.8) allows subscriber-level authenticated attackers to read arbitrary server files via the get_image_src_in_base64 function. The exfiltration channel is particularly stealthy: base64-encoded file contents are embedded into cached invoice HTML and retrieved through the plugin's own legitimate Print/Download endpoints using only a valid nonce and access key, potentially bypassing WAF rules that inspect request paths. No public exploit or CISA KEV listing is identified at time of analysis; however, the trivially low privilege bar - any registered WooCommerce customer qualifies - combined with high-value targets like wp-config.php credentials makes this an operational priority for any public-facing WooCommerce store.
Symlink-based arbitrary file read in NLTK's IPIPANCorpusReader exposes files accessible to the running process on systems where untrusted local users can write to corpus root directories. Affected NLTK versions before 3.10.2 fail to follow symlinks through the nltk.pathsec validation layer when IPIPANCorpusReader methods - channels(), domains(), categories(), or fileids() - resolve filenames, allowing the symlink target to be read instead of the intended corpus file. No public exploit or CISA KEV listing has been identified at time of analysis; real-world risk is bounded by the local attack vector and the requirement for write access to the corpus directory.
Path traversal in NLTK's CrubadanCorpusReader (versions 3.9.4 through 3.10.2) allows an attacker who controls a malicious corpus package to read arbitrary file contents outside the corpus root directory via the lang_freq interface. The vulnerability arises because _load_lang_ngrams bypasses NLTK's pathsec containment by calling the builtin open() instead of the pathsec-validated opener, enabling os.path.join to silently discard the corpus root prefix when an absolute path is supplied as the crubadan_code value. No public exploit exists and no KEV listing is present; a vendor patch is available in 3.10.3.
Arbitrary file read in the Tutor LMS WordPress plugin (all versions before 4.0.6) allows authenticated instructors to retrieve any file on the server — including files outside the web root — by exploiting a missing path validation check in the plugin's media streaming functionality. Critically, readable targets include wp-config.php, which exposes database credentials and WordPress authentication keys and salts; possession of these constants enables an attacker to forge valid session cookies for any account, including site administrators. No public exploit has been identified at time of analysis, and the EPSS score of 0.18% (8th percentile) reflects low observed exploitation activity, but the cascading impact path from instructor account to full site compromise makes patching urgent for any site with open instructor registration.
Infracost's template engine prior to v0.10.45 allows repository-controlled symlinks to escape the checkout directory, enabling any contributor with repository write access to read files accessible to the CI/CD runner. The vulnerable template functions - readFile, pathExists, isDir, and matchPaths in internal/config/template/parser.go - relied on lexical filepath.Abs normalization and leaf-only os.Lstat checks that failed to resolve intermediate directory symlinks, so a path like evil/secret passes validation while physically exiting the repository root. Captured file contents are rendered into Infracost configuration output and surfaced via the Infracost dashboard or pull request comments; no public exploit identified at time of analysis, and vendor-released patch is confirmed in v0.10.45.
Symlink-following arbitrary file write in ONNX's save_external_data function (onnx/external_data_helper.py) allows a local attacker with write access to a shared directory to redirect a victim's model serialization writes to any file the victim can modify — including ~/.ssh/authorized_keys, cron entries, and application configuration files. All ONNX releases up to and including 1.20.1 (pip/onnx) are affected; the vendor-released patch is 1.21.0. Publicly available exploit code is confirmed via the GHSA advisory, and CISA has published a CSAF advisory (va-26-233-01) covering this issue, indicating heightened government-sector awareness.
Unauthenticated arbitrary directory listing in the Gallery element of the YOOtheme Zoo extension for Joomla exposes server-side directory structures to any remote, unauthenticated attacker on sites running Zoo versions prior to 4.1.66. The path traversal vulnerability (CWE-22) allows crafted requests to enumerate directories outside the intended scope of the Gallery element, potentially revealing sensitive filesystem layout including configuration paths, user data directories, or other installed components. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Path traversal in the `apport-unpack` utility of Canonical Apport enables arbitrary file creation and overwrite by exploiting attacker-controlled key names embedded in crafted crash report files. Affected versions span all Apport releases before 2.28.4, 2.34.2, and 2.36.0 - software that ships by default with Ubuntu desktop and server editions. An attacker who delivers a malicious `.crash` file and induces a user or automated pipeline to unpack it can write files to any location accessible by the executing user, creating a realistic privilege-escalation primitive on multi-user or developer Ubuntu systems. No public exploit is identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Path traversal in IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 enables remote, unauthenticated attackers to bypass directory-based access controls by supplying manipulated pathname inputs that escape restricted filesystem boundaries. The vulnerability carries a CVSS 3.1 score of 4.8 (Medium) with high attack complexity (AC:H), which constrains opportunistic exploitation while still leaving targeted attacks viable without requiring credentials. No public exploit code or active exploitation has been identified at time of analysis; IBM has published an advisory at their support portal (https://www.ibm.com/support/pages/node/7283858).
Path traversal in Apple's open-source container runtime (versions before 1.2.0) enables a malicious builder peer to request host files by crafted names that resolve outside the build context, leaking arbitrary host filesystem contents. The CVSS vector (AV:N/AC:L/PR:L) indicates network-accessible exploitation by a low-privileged builder peer with no user interaction required. No active exploitation has been identified (no CISA KEV listing), and SSVC rates exploitation as none and automatability as no, reducing immediate operational urgency.
Authenticated path traversal in Winter CMS's LESS compilation pipeline allows backend users holding any of four specific permissions to exfiltrate arbitrary files readable by the PHP process - most critically the application .env file containing APP_KEY and database credentials. The vulnerability affects Winter CMS versions through 1.2.12 via four injection sinks: Brand Settings, Editor Settings, Mail Brand Settings colour fields, and theme CSS assets compiled by CombineAssets. No public exploit identified at time of analysis and no active exploitation confirmed, but confidentiality impact is high given .env disclosure enables full application key compromise.
Path traversal in Cesanta Mongoose's SSI processing allows an authenticated network attacker to read arbitrary files accessible to the Mongoose process by embedding directory traversal sequences in #include file or #include virtual SSI directives. The mg_ssi() function in src/ssi.c constructs filesystem paths from directive arguments without invoking the existing mg_path_is_sane() validation, bypassing the only guard against traversal. Exploitation is constrained to deployments compiled with MG_ENABLE_SSI and a configured ssi_pattern; no public exploit has been identified at time of analysis.
Path traversal during backup restore in Velero (vmware-tanzu/velero) allows an attacker who has compromised the object storage backend to overwrite arbitrary files on the Velero pod filesystem by uploading a malicious tarball containing filenames with directory traversal sequences. Targeted files include /etc/cron.d/ entries (enabling code execution within the pod), ~/.ssh/authorized_keys (enabling persistent SSH access), and ~/.kube/config (enabling full Kubernetes cluster credential theft). No patch had been released at the time of advisory publication, though fix version 1.18.1 is indicated in package metadata, suggesting the fix was released shortly after disclosure. No public exploit code or CISA KEV listing identified at time of analysis.
Path traversal in VictoriaMetrics vmrestore (prior to versions 1.122.25, 1.136.12, and 1.146.0) allows an attacker who controls or can modify a remote backup source - S3, GCS, Azure Blob Storage, or equivalent - to plant dot-dot sequences in object names, causing vmrestore to write restored files outside the configured -storageDataPath directory when an operator executes a restore operation. The CVSS Scope Changed metric (S:C) reflects that successful exploitation reaches beyond the vmrestore process boundary to the broader host filesystem, enabling potential overwrite of binaries, configuration, or credentials within the OS permissions of the process. Vendor-released patches are available across three maintained branches; no active exploitation has been identified at time of analysis.
Path traversal in the Banks Python prompt-template library (all versions prior to 2.4.5) allows a low-privileged attacker to write arbitrary bytes to attacker-chosen filesystem paths accessible to the application process. DirectoryPromptRegistry.set() in directory.py constructs on-disk paths by directly interpolating unvalidated Prompt.name and Prompt.version values - enabling relative sequences like ../victim/foo or absolute paths to escape the configured registry root. The poisoned path persists in index.json and is reconstructed on subsequent registry loads, meaning exploitation survives application restarts. No public exploit or CISA KEV listing exists at time of analysis; a vendor-released patch is available as version 2.4.5.
Path traversal in ATutor's error log viewer grants authenticated administrators read access to arbitrary files outside the intended logs directory, up to the web server process's permission boundary. Only version 2.2.4 has been confirmed vulnerable by CERT.pl, though other versions may also be affected. No patch will be issued - the product is end-of-life - making migration or decommissioning the only durable remediation.
Path traversal in ATutor 2.2.4 enables an authenticated low-privilege user to read files belonging to other course directories when the AT_FORCE_GET_FILE configuration option is active, leaking file contents and exposing filesystem structure. The product is end-of-life with no vendor-released patch, making remediation dependent entirely on compensating controls or decommissioning. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.
Direct HTTP access to an exposed SQL database backup file in code-projects Login Registration System 1.0 allows unauthenticated remote attackers to download the raw database dump at /loginsystem/database/login_registration_system.sql, disclosing user credentials, schema details, and any sensitive data stored in the application database. This is a CWE-552 file exposure defect - the backup artifact is stored within the web-accessible document root with no access controls. No exploitation beyond a standard HTTP GET request is required. A public proof-of-concept exploit exists; no KEV listing at time of analysis.
Path traversal in Splunk SOAR below 8.6.0 enables users holding the OnPrem Broker role to write files to arbitrary locations outside the designated Automation Broker log directory. The flaw stems from the log upload endpoint accepting crafted filenames without adequate sanitization, allowing directory traversal sequences to escape the intended write boundary. No public exploit has been identified and no active exploitation is confirmed; the CVSS score of 2.7 (Low) accurately reflects the high privilege prerequisite and the limited, integrity-only impact.
Path traversal in Splunk SOAR's Universal Forwarder credentials-package extraction allows an authenticated Administrator to write files to arbitrary locations on the underlying host filesystem. Affecting all On-premises versions below 8.6.0, the flaw stems from the archive extraction workflow accepting member paths containing directory traversal sequences without first verifying each member's resolved destination. No public exploit or CISA KEV listing exists at time of analysis; however, the Integrity:High and Availability:High CVSS impact ratings indicate that a malicious archive could overwrite system-level files, enabling persistence or privilege escalation beyond SOAR's own permission boundary.
Path traversal during app installation in Splunk SOAR On-premises below version 8.6.0 allows an authenticated user holding app-install privileges to write files outside the intended temporary extraction directory. The archive extraction routine fails to validate that file paths within an uploaded archive remain within the designated staging directory, enabling a classic Zip Slip attack that can overwrite arbitrary files on the host. No public exploit has been identified at time of analysis, and exploitation is constrained by the high-privilege prerequisite (PR:H); a vendor-released patch is available in version 8.6.0.
Path traversal in Splunk Enterprise exposes JavaScript files outside the Splunk Web static directory to unauthenticated remote attackers across four active release branches. Splunk Web fails to enforce boundaries on static file requests, allowing directory traversal reads without any credentials. No public exploit code has been identified at time of analysis and this vulnerability is not listed in the CISA KEV catalog, but the trivially low attack complexity (AC:L, PR:N, UI:N) means exploitation requires no special tooling.
Arbitrary code execution in IBM OpenBMC FW1060.00 through FW1060.80 is achievable via a path traversal flaw (CWE-22) in the BMC firmware update process, resulting in full confidentiality, integrity, and availability compromise of the baseboard management controller. Exploitation is constrained to authenticated administrators with adjacent network access to the BMC management interface, substantially limiting the real-world attack surface despite the high CIA impact. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Path traversal in RuoYi-Vue up to 3.9.2 allows authenticated low-privilege users to read arbitrary files from the server filesystem by manipulating the `fileName` or `resource` parameters of the Common Download Endpoint in `CommonController.java`. A publicly available exploit has been disclosed via GitHub issue, but no patch has been released and the maintainer has not responded to the disclosure. No CISA KEV listing is present, so confirmed active exploitation at scale is unverified, though the public POC and low attack complexity make opportunistic exploitation by authenticated insiders or compromised accounts a realistic near-term risk.
Path traversal in IBM AIX 7.2 and 7.3 and IBM PowerVM VIOS 4.1 exposes sensitive files to remote, unauthenticated attackers over the network. The flaw (CWE-22) allows directory traversal sequences to escape an intended path boundary, enabling read access to files that should not be externally accessible. No active exploitation has been confirmed by CISA KEV, and no public exploit code has been identified at time of analysis.
CPython's tarfile module on POSIX platforms creates empty directories outside the intended extraction destination when processing archive members whose names temporarily escape and re-enter it, such as '../evil/../dest/sub/file'. The extraction filters ('tar' and 'data') validate the resolved path - which correctly resolves to inside the destination - but create intermediate directories from the raw member name as given, allowing filesystem pollution beyond the extraction boundary. File contents are never placed outside the destination, and no public exploit has been identified at time of analysis; the PSF advisory confirms the limited scope.
Path traversal in OpenEMR's EDI archive restore function before version 8.3.0 enables authenticated users with EOB Data Entry permissions to enumerate arbitrary filesystem paths on the server via a differential response oracle. The unsanitized `archrestore_sel` POST parameter is passed directly to the archive restore handler, which checks the resolved path against the filesystem and returns distinct messages depending on whether the path exists - leaking file existence without disclosing file contents. No public exploit has been identified at time of analysis, and a vendor-released patch is available in OpenEMR 8.3.0.
Unauthenticated path traversal in Ground Station before v0.4.13 allows remote attackers to read arbitrary JSON-parseable files outside the intended recordings directory via the Socket.IO configure-sdr command. The sigmf-playback SDR type accepts an unsanitized recordingPath parameter that is stored verbatim and later opened by the sigmfprobe backend, enabling absolute-path or directory-traversal payloads to escape backend/data/recordings and return file contents to the caller. No public exploit has been identified at time of analysis; a vendor-released patch exists as of version 0.4.13.
Path traversal in Dell OpenManage Enterprise prior to version 4.7.0 allows a remote low-privileged attacker to read files outside the intended directory scope, resulting in information exposure. The vulnerability is classified under CWE-22 and carries a CVSS 3.1 base score of 6.5 (Medium), with high confidentiality impact and no integrity or availability impact. No public exploit code or active exploitation has been identified at time of analysis.
Arbitrary root-readable file disclosure in Linuxfabrik Monitoring Plugins prior to 7.0.0 allows a local attacker controlling the monitoring account to exfiltrate sensitive files such as /etc/shadow by supplying a crafted --filename path to the logfile check plugin, which executes as root via the shipped sudoers allowlist without confining the resolved path to /var/log. The same path-traversal flaw extends to the mysql-logfile and openvpn-client-list plugins. No public exploit code or CISA KEV listing has been identified at time of analysis, but the attack is straightforward and requires only monitoring-account-level access.
Path traversal in Confidential Containers guest-components (image-rs) versions 0.16.0 through 0.19.x allows a workload owner to create hardlinks outside the OCI layer destination directory and into arbitrary absolute paths within the pod virtual machine. The root cause is Rust's standard library behavior where `Path::join()` silently discards the base path when the right-hand operand is absolute, allowing a crafted tar entry to bypass directory confinement in `try_hardlink_fallback()`. While this does not cross the image trust boundary - the workload owner already controls trusted image content - it enables escape into pod VM capabilities and potential attestation abuse; no public exploit code has been identified at time of analysis.
Arbitrary root file read in Linuxfabrik monitoring plugins allows a local attacker controlling the nagios or icinga account to exfiltrate any root-readable file by exploiting the hidden but permanently live --test argument accepted by all sudoers-whitelisted check plugins. Invoking the deb-updates plugin via sudo with --test=/etc/shadow,,0 causes lftest.py to read the supplied path as root with no path confinement and echo its full contents to stdout; approximately 22 additional whitelisted plugins yield filtered leaks or file-existence oracles through the same mechanism. No active exploitation has been confirmed by CISA KEV, but a fully functional proof-of-concept command is publicly disclosed in the vendor's own GitHub security advisory GHSA-rh9c-rqvg-f7pr, and patches are available in linuxfabrik-lib v6.1.0 and monitoring-plugins v7.0.0.
Path traversal in Blueprint Studio prior to 2.5.2 allows an authenticated Home Assistant administrator to escape the intended configuration directory boundary via the legacy terminal command execution path. By supplying an arbitrary `cwd` working-directory parameter, the administrator can direct terminal commands to any host path accessible to the Home Assistant container process, reading or modifying files outside the HA config root. No public exploit identified at time of analysis; the CVSS 4.0 score of 5.1 reflects the high privilege requirement (PR:H), and exploitation is strictly bounded by container filesystem permissions.
Absolute path traversal in NVIDIA Triton Inference Server for Linux exposes arbitrary filesystem files to low-privileged local attackers, with the vendor flagging potential code execution as a secondary consequence. The vulnerability is classified under CWE-36 and affects all versions captured by the wildcard CPE, meaning no upper-bound patched version is confirmed from current data. No public exploit code has been identified and this CVE does not appear in the CISA KEV catalog at time of analysis, though the discrepancy between the RCE tag and the CVSS confidentiality-only impact metrics leaves the true blast radius unresolved.
Arbitrary file read via path traversal in MobSF prior to 4.5.1 allows authenticated users with scan-upload permissions to exfiltrate server-side files by embedding traversal sequences in the android:icon attribute of a crafted AndroidManifest.xml inside a ZIP or APK upload. The vulnerable find_icon_path_zip() function resolves the attacker-controlled icon path without containment checks, copies the target file to a predictable location in DWD_DIR, and exposes it through the /download/ endpoint. A fully functional proof-of-concept script is publicly available in the GHSA advisory; this issue is not listed in the CISA KEV catalog.
Arbitrary file write in Trivy's plugin manager prior to version 0.72.0 allows a malicious plugin author to escape the confines of ~/.trivy/plugins and write files to any user-writable filesystem path. The flaw exists in pkg/plugin/manager.go, where plugin manifest metadata is used to construct file paths without enforcing directory confinement, enabling a path traversal (CWE-22) attack. No public exploit has been identified and no CISA KEV listing exists, but the attack is mechanically simple and the impact extends to overwriting sensitive user files such as shell profiles or SSH authorized_keys, creating realistic subsequent privilege escalation paths.
Arbitrary file download via path traversal in the CTX Feed WordPress plugin (versions <= 6.6.47) exposes server-side files to authenticated shop managers. The vulnerability (CWE-22) allows a WooCommerce shop manager to craft requests that traverse directory boundaries and retrieve arbitrary files - including sensitive configuration files such as wp-config.php - directly from the web server. No public exploit code or active exploitation has been identified at time of analysis, but the confidentiality impact is complete given successful exploitation.
Unauthenticated path traversal in reportico-web <= 8.1.0 allows remote attackers to expose PHP source files or execute existing PHP files on the server by manipulating the target_format parameter of the run.php endpoint combined with the execute_mode=EXECUTE directive. The vulnerability requires no authentication and is reachable over the network, meaning any internet-exposed instance is at risk. Publicly available exploit research exists (kilotel/vulnerability-research); no public exploit identified as confirmed actively exploited (CISA KEV). EPSS stands at 0.37% (30th percentile), suggesting low observed exploitation frequency at time of analysis.
Path traversal in JumpServer's KoKo Web Terminal SFTP component (versions 4.8.0 through 4.10.16) allows authenticated users holding SFTP asset permissions to escape the intended SFTP root directory sandbox. The root cause is insufficient path normalization in AssetDir.GetRealPath() (pkg/srvconn/sftp_asset.go), where a naive strings.HasPrefix boundary check is applied before path cleaning, enabling crafted traversal sequences to bypass the root confinement. A low-privileged authenticated attacker can read, list, write, rename, or delete files accessible to the configured backend account on the managed asset, potentially exposing credentials and configuration data beyond the intended access scope. No active exploitation is confirmed and no public exploit has been identified at time of analysis; vendor-released patch 4.10.17 is available.
Arbitrary file read in Hugging Face Transformers allows an attacker who controls a model checkpoint index file to exfiltrate files from the host filesystem outside the intended model directory. The library fails to sanitize shard filenames in checkpoint index files before joining them to directory paths, meaning maliciously crafted entries containing parent-directory sequences or absolute paths resolve to unintended locations. Any user or automated pipeline that loads an attacker-supplied checkpoint - for example, by downloading a model from an untrusted Hub repository - can have host files disclosed without code execution. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Path traversal in Notepad++ before version 8.9.7 enables local attackers with write access to the user's profile directory to read arbitrary user-readable files outside the designated backup folder by poisoning session.xml. The backupFilePath attribute is validated with std::wstring::starts_with against the expected backup directory prefix but without prior path normalization, allowing dot-dot sequences to bypass the check during snapshot-mode session restoration and load an out-of-bounds file into an editor tab. No public exploit code or active exploitation has been identified at the time of analysis; the vendor released a confirmed fix in version 8.9.7.
Path traversal in ApostropheCMS's import-export module (versions prior to 3.6.2) allows an authenticated contributor to exfiltrate host files and expose them publicly via the CMS uploads URL. By importing a crafted `.tar.gz` archive with `../` sequences embedded in the `_id`, `name`, or `extension` fields of `aposAttachments.json`, an attacker causes the module to reconstruct a source path that escapes the extraction directory, reading any host file whose name ends with an allow-listed extension and copying it to a publicly accessible, unauthenticated uploads endpoint. No public exploit is identified at time of analysis; vendor-released patch is available in version 3.6.2.
Path traversal in uniget CLI's hook filename handling exposes arbitrary local filesystem files to any user able to invoke the `uniget hooks edit` or `hooks remove` subcommands, affecting all releases prior to v0.27.6. The root cause in hooks.go is direct string concatenation of the unsanitized `args[0]` value with `preInstallHooksDir`, allowing `../` sequences to escape the designated hooks directory entirely. A publicly available proof-of-concept included in GHSA-m6jg-wr9m-cg2f demonstrates reading `/etc/passwd` in a single command; no public exploit is independently weaponized and the vulnerability is not listed in CISA KEV, but the PoC lowers the exploitation bar substantially for anyone with CLI access.
Arbitrary file deletion in Terragrunt before v1.0.4 allows an attacker who controls a remote module source to delete any file accessible to the Terragrunt process by embedding directory traversal paths in a forged `.terragrunt-module-manifest` file within the module. The deletion occurs automatically during the module download and initialization phase - before OpenTofu or Terraform executes - making CI/CD pipelines that consume external modules particularly exposed. No public exploit has been identified and no CISA KEV listing exists; a vendor-released patch is available in v1.0.4. Note: an 'RCE' tag in the source metadata directly contradicts the vendor advisory's explicit statement that this is a deletion-only primitive with no code execution or data exfiltration capability.
Path traversal in Microsoft Kiota's AI plugin manifest generator allows an attacker who controls or tampers with the OpenAPI description input to inject percent-encoded file references - including double-encoded sequences, NUL-byte payloads, and Unicode full-width homoglyphs - that bypass the IsSafeFileReference validator and are written verbatim into the generated plugin manifest. When an AI host deploys and resolves the manifest, it can access files outside the intended package boundary, leading to disclosure of sensitive files such as /etc/passwd. The vulnerability affects nuget/Microsoft.OpenApi.Kiota versions prior to 1.29.1 and 1.30.0 through 1.33.x; no public exploit or active exploitation is confirmed at time of analysis.
Path traversal in Dell ObjectScale before version 4.3.0.1 enables a local, low-privileged attacker to read files outside the intended directory scope, resulting in partial information disclosure. The CVSS 3.3 (Low) score reflects the constrained attack surface - local authenticated access and an existing low-privileged account are prerequisites, and impact is limited to confidentiality with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis.
Directory traversal in the Kirki WordPress plugin (all versions through 6.1.1) allows authenticated attackers with editor-level access to read arbitrary files on the server by exploiting a flawed strpos()-based path validation guard in the plugin's AJAX ExportImport handler. By crafting a 'data' parameter value that embeds the uploads directory path as a substring while appending directory traversal sequences, an attacker can escape the intended upload directory restriction and retrieve sensitive files such as wp-config.php containing database credentials and secret keys. No active exploitation has been confirmed and no CISA KEV listing exists; the CVSS score of 4.9 (Medium) reflects the high privilege requirement, though the confidentiality impact is rated High due to the severity of files that can be exposed as a precursor to full site compromise.
Directory traversal in the StoreEngine WordPress plugin (Kodezen) through version 2.1.1 exposes arbitrary server files to authenticated users holding vendor-level access or higher. The flaw resides in the `parse_file_path` function, which insufficiently sanitizes file path input across the plugin's download handler and multi-vendor addon components, allowing path sequences to escape the intended directory. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, but the confidentiality impact is high given that readable files may include WordPress configuration, database credentials, or private keys.
Unauthenticated path traversal in the token-optimizer-mcp dashboard server (npm package @ooples/token-optimizer-mcp v5.0.1) allows any network-accessible attacker to read arbitrary .jsonl files from the server's filesystem by supplying a crafted sessionId parameter to /api/session-summary or /api/session-events. The CVSS vector (PR:N, AV:N, AC:L, UI:N) confirms zero authentication or user interaction is required, and a working proof-of-concept demonstrating successful out-of-bounds file exfiltration has been publicly disclosed in GHSA-76pc-mqxp-3rq5. No active exploitation has been confirmed by CISA KEV, but the trivial exploitation complexity and public PoC make this an immediate priority for any internet-exposed deployment.
Path traversal in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 exposes sensitive filesystem content to remote authenticated attackers via improper validation of user-supplied file paths. The CVSS 6.5 score (AV:N/AC:L/PR:L/UI:N) reflects network-accessible, low-complexity exploitation requiring only a low-privileged account, with high confidentiality impact and no integrity or availability loss. No active exploitation is confirmed (not listed in CISA KEV), no public proof-of-concept has been identified, and EPSS data was not present in the available intelligence.
Path traversal in KUNBUS RevPiPyLoad 0.11.0 enables local users to delete arbitrary files through the XML-RPC management interface without authenticating to the service, exploiting the daemon's own filesystem privileges via crafted requests. Discovered and reported by Nozomi Networks Labs, the flaw allows an attacker to corrupt configuration files or trigger denial of service on Revolution Pi industrial controllers, with integrity and availability impact classified as high. No public exploit code has been identified at time of analysis, and the product is not listed in the CISA KEV catalog.
Path traversal in KUNBUS RevPiPyLoad 0.11.0 exposes arbitrary file read via the XML-RPC management interface, allowing a local attacker to access sensitive files at daemon-level privileges. Nozomi Networks Labs discovered that the file management functionality of the local management service fails to sanitize directory path input before serving files, enabling escape from the intended file access scope. No public exploit code or CISA KEV listing exists at time of analysis; however, successful exploitation yields high confidentiality impact including potential exposure of credential material and configuration files critical to ICS environments.
Path traversal in Logback-classic versions 0.9.14 through 1.6.2 enables a remote unauthenticated attacker to create and append log files at arbitrary filesystem locations by injecting traversal sequences into an MDC (Mapped Diagnostic Context) value that flows unsanitized into a nested FileAppender path. Deployments using MDC-based discriminators - a pattern frequently triggered by HTTP header values automatically stored in MDC by web frameworks - are directly at risk. No public exploit code or active exploitation has been confirmed at time of analysis; vendor fix notes reference version 1.6.3 as the remediated release.
Path traversal in wvp-GB28181-pro 2.7.4-20260107 exposes arbitrary server-side files through the Log File Download Endpoint in LogController.java, where the unsanitized `fileName` parameter allows directory escape sequences to be supplied by authenticated remote attackers. A public proof-of-concept exploit has been released per the CVSS 4.0 supplemental metric (E:P) and VulDB submission, lowering the bar for exploitation. Impact is limited to low-severity confidentiality loss with no integrity or availability effects, consistent with the CVSS 4.0 score of 2.1 and a PR:L/VC:L vector.
Path traversal in wvp-GB28181-pro 2.7.4-20260107 exposes arbitrary server files through the Snapshot Endpoint in PlayController.java, where the deviceId and channelId parameters are incorporated into file system operations without sanitization. Authenticated remote attackers with low-privilege access can escape the intended snapshot directory by injecting traversal sequences into these parameters, yielding partial confidentiality, integrity, and availability impact. A publicly available proof-of-concept exploit exists on GitHub (issue #2175), materially lowering the barrier to exploitation despite the moderate CVSS 5.3 score and absence from the CISA KEV catalog.
Path traversal in AllData up to version 0.6.8 enables remote unauthenticated attackers to read arbitrary files from the server filesystem via the logDetailCat endpoint. The executorAddress parameter is passed unsanitized to FileInputStream in JobLogController.java, allowing directory traversal sequences to escape the intended file access boundary. A public exploit has been published on GitHub; no patch exists and the vendor has permanently declined to fix the issue by closing the bug report as 'not planned.'
Path traversal in Grav CMS backup profile validation exposes arbitrary server files to authenticated users with profile editor privileges. All Grav versions before 2.0.13 fail to canonicalize or allowlist backup profile root paths, relying instead on an insufficient hard-coded deny-list, allowing traversal sequences such as '../../opt' to be accepted. An attacker holding a profile editor account can configure a malicious backup profile, trigger a backup job, and download an archive containing sensitive files from directories like /opt, /mnt, or /srv that reside entirely outside GRAV_ROOT. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Path traversal in the actix-files Rust crate (versions 0.6.9 and earlier) exposes arbitrary files from the application's working directory to unauthenticated remote attackers. When `Files::new()` receives a non-existent `serve_from` directory, the library silently substitutes an empty base path; subsequent requests join attacker-supplied filenames against this empty root, which Rust's `canonicalize()` resolves relative to the process working directory, enabling direct file disclosure. A publicly available proof-of-concept exploit exists; no confirmed active exploitation (CISA KEV) has been identified at time of analysis.
Path traversal in DTStack Taier 1.4.0's UploadController allows privileged remote attackers to write files outside the intended upload directory by supplying a crafted filename containing sequences such as '../' or absolute paths. The commit diff confirms that `MultipartFile.getOriginalFilename()` output was concatenated directly into a filesystem path without any sanitization before the fix. The CVSS 4.0 PR:H rating constrains exploitation to authenticated high-privilege users; no public exploit code or CISA KEV listing exists at time of analysis.
Path traversal in dromara lamp-cloud (versions up to 5.10.0) exposes the chunk-check endpoint of FileChunkController.java to remote directory traversal via a crafted 'Name' argument, potentially allowing attackers to read or write files outside the intended upload directory. No authentication is required per the CVSS 4.0 vector (PR:N), and a public exploit has been disclosed (CVSS E:P modifier), lowering the barrier for opportunistic exploitation. The vendor was notified via GitHub issue #413 but has not yet responded, leaving no official patch available at time of analysis.
Path traversal in Dromara lamp-cloud up to version 5.10.0 allows remote unauthenticated attackers to manipulate file storage paths via the bucket and bizType parameters in FileAnyoneController.java. The affected endpoint appears intentionally public (indicated by the 'Anyone' controller name), lowering the bar for exploitation significantly. No vendor patch is available at time of analysis, and a public proof-of-concept exploit exists, though no CISA KEV listing confirms active mass exploitation.
Path traversal in DTStack Taier 1.4.0 allows an authenticated administrative user to supply a crafted clusterName containing directory-escape sequences during cluster creation, causing FileUtils.deleteDirectory to operate on arbitrary filesystem paths outside the intended temp directory. The CVSS 4.0 score of 5.1 with PR:H reflects the constrained attack surface: only users with cluster management privileges can trigger the flaw. No public exploit code or CISA KEV listing exists at time of analysis.
Path traversal in DTStack Taier 1.4.0's Chunk-Check Endpoint exposes the server's filesystem to remote unauthenticated attackers who can manipulate the Name parameter in FileChunkController.java to escape the intended upload directory. The Java Paths.get() function processes attacker-controlled input without sanitization, enabling directory traversal sequences to reference arbitrary files accessible to the Taier process. A public proof-of-concept exploit is available via GitHub issue #1203, and no exploitation confirmation from CISA KEV exists at time of analysis.
Path traversal in Dromara lamp-cloud's Code Generator component (DefGenProjectController.java), affecting all versions up to 5.10.0, enables authenticated remote attackers to manipulate the `outputDir`, `parent`, and `projectPrefix` parameters to read or write files outside the application's intended output directory. A proof-of-concept exploit has been publicly disclosed (confirmed by CVSS 4.0 supplemental metric E:P), and no vendor patch is available at time of analysis as the project maintainer has not responded to the responsible disclosure submitted via GitHub issue. The attack requires low-privileged authenticated access, which bounds real-world risk but does not eliminate it in multi-user development or DevOps platforms.
Cross-tenant run replay in Trigger.dev 4.4.2-4.5.0-rc.3 allows any authenticated API key holder to replay task runs belonging to other tenants by supplying a victim's run `friendlyId` to the replay endpoint, which performs no tenant isolation check. This unauthorized replay consumes victim compute resources and re-executes side effects such as outbound API calls, webhook triggers, and database writes. A secondary chained code path further allows attacker-controlled payload bytes - planted via a separate object-store path-traversal - to become input to the victim task when `payloadType: application/store` is in use. No public exploit has been identified at time of analysis, and this CVE is not listed in CISA KEV.
Path traversal in IBM i 7.3, 7.4, 7.5, and 7.6 allows a remote authenticated attacker to read sensitive files outside their permitted directory boundaries, resulting in unauthorized information disclosure. The vulnerability carries a CVSS 3.1 base score of 4.3 (Medium) and is limited strictly to confidentiality impact - integrity and availability are unaffected. A vendor-supplied patch is available, and no public exploit code or CISA KEV listing has been identified at time of analysis.
Path traversal in IBM i 7.3 through 7.6 enables remote attackers holding high-privilege credentials to manipulate files outside intended directory boundaries. The CVSS score of 2.7 (Low) accurately reflects the constrained impact - exploitation is limited to authenticated users with high privileges (PR:H), and the resulting damage is restricted to limited file integrity modification with no confidentiality or availability consequences. No public exploit code has been identified at time of analysis, and IBM has released a vendor patch.
Path traversal in IBM i 7.3 through 7.6 allows remote authenticated attackers holding high-privilege accounts to delete arbitrary files outside their intended directory scope. The flaw (CWE-22) results from insufficient sanitization of user-supplied path input in a file management operation reachable over the network. No public exploit code has been identified at time of analysis, and a vendor-released patch is available via the IBM support portal.
CyberPanel versions before 3.0.0 expose a path traversal in the cloudAPI ReadReport endpoint that allows authenticated administrators to read any file accessible by the root-privileged CyberPanel process. The `reportFile` parameter in the JSON request body is passed without sanitization directly to Python's `open()` in `cloudManager.py`, enabling directory traversal to credential files, SSL and SSH private keys, and JWT secrets. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis, though the vulnerability is straightforward to abuse given administrative credentials.
Path traversal in Zimbra Collaboration Suite (ZCS) Briefcase document editing exposes sensitive web application files to authenticated low-privileged users. The vulnerability stems from improper validation of the `packages` parameter, enabling directory escape via crafted traversal sequences. No public exploit code or CISA KEV listing has been identified at time of analysis; the vendor has released a fix in version 10.1.17.
Path traversal in rsync before 3.5.0 allows a malicious sender to write arbitrary files outside the receiver's intended destination directory by exploiting symlink following in --relative mode. The make_path() function creates intermediate directories while following symlinks without enforcing that resolved paths stay within the destination tree boundary, enabling controlled file writes to arbitrary locations on the receiver's filesystem. No public exploit or CISA KEV listing is confirmed at time of analysis, but the CVSS 4.0 score of 6.9 with high integrity and availability impact reflects meaningful real-world risk given rsync's ubiquity in backup and synchronization workflows.