Path Traversal

Path traversal in GitPython before 3.1.58 allows remote attackers who control a Git repository to create fully initialized, attacker-controlled Git repositories at arbitrary filesystem paths outside the intended clone directory. GitPython's independent submodule implementation reads submodule names from .gitmodules without any validation - a check that core Git added years ago in response to CVE-2018-11235 - and passes the raw, traversal-containing name directly to os.makedirs() and git clone. A proof-of-concept with Docker-based reproduction is publicly documented in GHSA-hmq2-w58f-27jc; no CISA KEV listing is present at time of analysis, indicating exploitation is not yet confirmed as widespread.

Path traversal in Dell OpenManage Enterprise prior to version 4.7.0 allows a remote low-privileged attacker to read files outside the intended directory scope, resulting in information exposure. The vulnerability is classified under CWE-22 and carries a CVSS 3.1 base score of 6.5 (Medium), with high confidentiality impact and no integrity or availability impact. No public exploit code or active exploitation has been identified at time of analysis.

Arbitrary file write in the W3 Total Cache WordPress plugin before 2.10.5 lets unauthenticated remote attackers overwrite any existing file inside or outside the web root by manipulating the request path used to construct cache file names. Because the plugin builds cache filenames from an unvalidated path, attackers can clobber security-critical files such as Apache .htaccess, breaking the site and stripping hardening rules that other controls depend on. No public exploit identified at time of analysis and EPSS is low (0.18%), but SSVC rates technical impact as total and the flaw is automatable, so priority is high despite the current lack of observed exploitation.

Unauthenticated path traversal in the Simple File List WordPress plugin (versions through 6.3.11) exposes an unvalidated file-move endpoint accessible without authentication, enabling arbitrary server file reads and displacement of critical WordPress files outside the web root. Remote attackers can exfiltrate sensitive data such as wp-config.php database credentials and secret keys, and can displace core WordPress files to cause site failure or enable site takeover. No public exploit code has been identified at time of analysis, but the CISA SSVC framework rates the attack as automatable with no privileges required, elevating real-world risk despite a low current EPSS score.

Arbitrary file deletion in the Atarim AI Agency for WordPress plugin (all versions through 5.1.1) allows authenticated attackers holding author-level credentials to delete any file on the underlying server via a chained directory traversal attack, with a direct path to remote code execution. The exploit chain poisons WordPress attachment metadata with a traversal path and then triggers the plugin's media replacement workflow to resolve and unlink the attacker-chosen target file. No public exploit has been identified at time of analysis, but the Wordfence advisory fully documents the two-step chain against verified source code, making independent reproduction straightforward for a moderately skilled attacker.

Arbitrary root-readable file disclosure in Linuxfabrik Monitoring Plugins prior to 7.0.0 allows a local attacker controlling the monitoring account to exfiltrate sensitive files such as /etc/shadow by supplying a crafted --filename path to the logfile check plugin, which executes as root via the shipped sudoers allowlist without confining the resolved path to /var/log. The same path-traversal flaw extends to the mysql-logfile and openvpn-client-list plugins. No public exploit code or CISA KEV listing has been identified at time of analysis, but the attack is straightforward and requires only monitoring-account-level access.

Path traversal in Streambert's Electron desktop app before version 2.6.0 allows a compromised renderer process to direct the privileged main process to create directories, write renderer-controlled JSON data, and delete files at arbitrary filesystem locations outside the intended backup directory. The vulnerable `perform-scheduled-backup` IPC handler in `src/ipc/storage.js` accepts `settings.path` from the renderer without validating it against an authorized backup location, enabling traversal via absolute paths or `../../`-style sequences. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the high integrity and availability impact across both the vulnerable system and subsequent systems is reflected in the CVSS 4.0 score of 8.4.

Path traversal in Streambert (versions prior to 2.5.0) allows a compromised Electron renderer process to abuse the run-download IPC channel to copy arbitrary files readable by the Streambert process into attacker-controlled locations, and to overwrite existing writable files on the host system. The downloadSubtitleFile utility in src/ipc/downloads.js accepts renderer-supplied file: URIs and destination paths without sanitization, passing them directly to fs.copyFileSync - crossing the Electron IPC boundary without restriction. No public exploit is identified at time of analysis, but the CWE-22 path traversal root cause is well-understood and the vendor-released patch is available in version 2.5.0.

Path traversal in 4gaBoards before version 3.3.8 allows authenticated project managers to read and then delete arbitrary files accessible to the server process through a crafted filename parameter in the export download endpoint. The vulnerability in `server/api/controllers/boards/download.js` passes unsanitized user input directly to `path.join()` without containment validation, enabling escape from the intended `private/exports/<user_id>/` directory. A compounding defect in the stream close handler passes the same traversal path to `fs.unlink()`, meaning each exploited download request also destroys the targeted file - combining exfiltration with irreversible data loss in a single HTTP request. No public exploit has been identified and the vulnerability is not listed in the CISA KEV catalog.

Path traversal in Confidential Containers guest-components (image-rs) versions 0.16.0 through 0.19.x allows a workload owner to create hardlinks outside the OCI layer destination directory and into arbitrary absolute paths within the pod virtual machine. The root cause is Rust's standard library behavior where `Path::join()` silently discards the base path when the right-hand operand is absolute, allowing a crafted tar entry to bypass directory confinement in `try_hardlink_fallback()`. While this does not cross the image trust boundary - the workload owner already controls trusted image content - it enables escape into pod VM capabilities and potential attestation abuse; no public exploit code has been identified at time of analysis.

Arbitrary root file read in Linuxfabrik monitoring plugins allows a local attacker controlling the nagios or icinga account to exfiltrate any root-readable file by exploiting the hidden but permanently live --test argument accepted by all sudoers-whitelisted check plugins. Invoking the deb-updates plugin via sudo with --test=/etc/shadow,,0 causes lftest.py to read the supplied path as root with no path confinement and echo its full contents to stdout; approximately 22 additional whitelisted plugins yield filtered leaks or file-existence oracles through the same mechanism. No active exploitation has been confirmed by CISA KEV, but a fully functional proof-of-concept command is publicly disclosed in the vendor's own GitHub security advisory GHSA-rh9c-rqvg-f7pr, and patches are available in linuxfabrik-lib v6.1.0 and monitoring-plugins v7.0.0.

Path traversal in Blueprint Studio prior to 2.5.2 allows an authenticated Home Assistant administrator to escape the intended configuration directory boundary via the legacy terminal command execution path. By supplying an arbitrary `cwd` working-directory parameter, the administrator can direct terminal commands to any host path accessible to the Home Assistant container process, reading or modifying files outside the HA config root. No public exploit identified at time of analysis; the CVSS 4.0 score of 5.1 reflects the high privilege requirement (PR:H), and exploitation is strictly bounded by container filesystem permissions.

Path traversal via unsanitized plugin identifier in MineAdmin's app-store service enables any authenticated user to read directory existence outside the plugin root, trigger Plugin::install() and Plugin::uninstall() on arbitrary filesystem paths, and potentially execute arbitrary Composer commands. Affected versions are all releases of composer/mineadmin/mineadmin prior to v3.2.0-alpha.2. Compounded by a missing PermissionMiddleware on the plugin store controller (GM-4340), any bearer-token holder - not just administrators - can reach the vulnerable endpoints. A proof-of-concept is publicly available and the vulnerability has been reproduced in a Docker environment.

Absolute path traversal in NVIDIA Triton Inference Server for Linux exposes arbitrary filesystem files to low-privileged local attackers, with the vendor flagging potential code execution as a secondary consequence. The vulnerability is classified under CWE-36 and affects all versions captured by the wildcard CPE, meaning no upper-bound patched version is confirmed from current data. No public exploit code has been identified and this CVE does not appear in the CISA KEV catalog at time of analysis, though the discrepancy between the RCE tag and the CVSS confidentiality-only impact metrics leaves the true blast radius unresolved.

Path traversal in NVIDIA Triton Inference Server for Linux (CWE-22) lets remote attackers manipulate file paths to reach locations outside intended directories, with the vendor citing denial of service as the primary outcome. NVIDIA assigned a critical 9.8 CVSS score claiming full confidentiality, integrity, and availability impact, though the published description only asserts DoS. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Absolute path traversal in NVIDIA Triton Inference Server for Linux enables remote unauthenticated attackers to read or write files outside intended directories. Exploitation may lead to arbitrary code execution and information disclosure, elevating the practical risk above what the moderate CVSS score of 6.5 might suggest given the RCE tag. No public exploit code or CISA KEV listing has been identified at time of analysis, but the network-accessible attack vector with no authentication requirement makes this a credible threat to exposed inference server deployments.

Arbitrary file read via path traversal in MobSF prior to 4.5.1 allows authenticated users with scan-upload permissions to exfiltrate server-side files by embedding traversal sequences in the android:icon attribute of a crafted AndroidManifest.xml inside a ZIP or APK upload. The vulnerable find_icon_path_zip() function resolves the attacker-controlled icon path without containment checks, copies the target file to a predictable location in DWD_DIR, and exposes it through the /download/ endpoint. A fully functional proof-of-concept script is publicly available in the GHSA advisory; this issue is not listed in the CISA KEV catalog.

Path traversal via unsanitized cluster node names in Wazuh Manager 4.0.0 through 4.14.5 enables authenticated cluster peers to delete arbitrary directory contents on the master node. An attacker holding a valid cluster Fernet key can supply a traversal-shaped node name (e.g., '../../etc') in the cluster hello handshake, then disconnect - causing the master's peer cleanup routine to recursively remove the contents of directories outside the intended cluster queue path, writable by the wazuh user. No public exploit has been identified at time of analysis, and a vendor patch is available in 4.14.6.

Path traversal in Wazuh Manager 4.0.0 through 4.14.5 allows unauthenticated remote attackers to destroy the manager's queue directory structure and halt all Wazuh services by registering an agent whose name begins with a dot (e.g., ".."). Two compounding weaknesses drive the impact: OS_IsValidName() failed to reject dot-prefixed agent names, and delete_diff() performs unsafe path concatenation that resolves the traversal sequence to the parent queue directory, wiping its subdirectories. Recovery requires manual intervention, creating a complete and sustained loss of SIEM and XDR visibility. No public exploit or CISA KEV listing has been identified at time of analysis.

Unauthenticated file disclosure in CodeWhale before 0.8.64 allows arbitrary local file reads via the image_analyze tool's failure to resolve symbolic links before enforcing workspace boundaries. An attacker who can place a crafted symlink (named with an image extension) inside a victim's workspace - for example via a malicious git repository - can cause CodeWhale's vision endpoint to read and transmit the symlink target's bytes without user approval. No CISA KEV listing or public exploit has been identified, but the CVSS 4.0 score of 8.7 and high confidentiality impact make this a meaningful risk for developers who open untrusted projects in CodeWhale.

Arbitrary file read in CodeWhale before version 0.8.64 allows an attacker to exfiltrate files from a developer's workstation by embedding a malicious `.codewhale/config.toml` in a repository. The `instructions` array in project config accepted arbitrary filesystem paths without workspace boundary enforcement, causing the tool to silently read and inject targeted files into the AI system prompt. No public exploit or CISA KEV listing has been identified at time of analysis, but the attack primitive is a well-understood path traversal and requires no technical sophistication beyond crafting a config file.

Arbitrary file write in Trivy's plugin manager prior to version 0.72.0 allows a malicious plugin author to escape the confines of ~/.trivy/plugins and write files to any user-writable filesystem path. The flaw exists in pkg/plugin/manager.go, where plugin manifest metadata is used to construct file paths without enforcing directory confinement, enabling a path traversal (CWE-22) attack. No public exploit has been identified and no CISA KEV listing exists, but the attack is mechanically simple and the impact extends to overwriting sensitive user files such as shell profiles or SSH authorized_keys, creating realistic subsequent privilege escalation paths.

Arbitrary file download via path traversal in the CTX Feed WordPress plugin (versions <= 6.6.47) exposes server-side files to authenticated shop managers. The vulnerability (CWE-22) allows a WooCommerce shop manager to craft requests that traverse directory boundaries and retrieve arbitrary files - including sensitive configuration files such as wp-config.php - directly from the web server. No public exploit code or active exploitation has been identified at time of analysis, but the confidentiality impact is complete given successful exploitation.

Unauthenticated arbitrary file download in the Extra Product Options & Add-Ons for WooCommerce plugin (all versions prior to 7.6) allows any remote attacker without credentials to traverse directory paths and retrieve arbitrary files from the web server, including highly sensitive files such as wp-config.php containing database credentials and secret keys. Rooted in CWE-22 path traversal, the CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N) confirms zero-barrier network exploitation with high confidentiality impact. No public exploit code has been identified at time of analysis, and the flaw is not listed in the CISA KEV catalog.

Path traversal on Windows-hosted DataEase instances allows unauthenticated remote attackers to read arbitrary files from the server filesystem by exploiting a filter bypass unique to the Windows backslash path separator. All DataEase versions prior to 2.10.23 on Windows are affected; the root cause is that string truncation logic blocks only the forward-slash but not the backslash, which Windows treats as an equivalent directory separator. No public exploit has been identified at time of analysis, but the vendor-confirmed CVSS 4.0 score of 8.7 with a network-accessible, no-privileges vector warrants immediate patching on any Windows deployment.

Path traversal in AKINSOFT Wolvox9 ERP's KontrolPanel.exe component exposes arbitrary server-side files to unauthenticated remote attackers via unsanitized file path inputs. Affected deployments span versions s26.02.17 through s26.02.21, with a confirmed fix in version 26.02.22 per TR-CERT advisory TR-26-0851. No public exploit code or CISA KEV listing has been identified at time of analysis, but the PR:N/AC:L CVSS profile (7.5 High, C:H) means exploitation requires no specialized knowledge or credentials - any attacker with network reach to the service can trivially exfiltrate sensitive ERP data.

Path traversal in ArcadeDB versions before 26.8.1 enables authenticated root users to write and delete arbitrary files outside the designated database directory via the POST /api/v1/server REST API endpoint. By embedding ../ sequences within database names passed to create database or drop database commands, a root-privileged attacker can place files at arbitrary filesystem paths or recursively delete directories accessible to the server process. No public exploit has been identified and no CISA KEV listing exists, but the CVSS 4.0 score of 8.4 reflects high integrity and availability impact across both the ArcadeDB process and the underlying OS filesystem.

Arbitrary file read in ArcadeDB's OpenCypher LOAD CSV FROM clause allows any authenticated user with read query privileges to exfiltrate arbitrary server-side files. All versions prior to 26.8.1 are affected, as confirmed by the vendor's GitHub security advisory GHSA-hfp5-6gcp-8c75. An attacker issuing a crafted LOAD CSV FROM 'file:///etc/shadow' statement receives the file contents directly in the query response, exposing credentials, private keys, and configuration data readable by the server process - no public exploit or CISA KEV listing has been identified at time of analysis.

Path traversal in Grav Plugin API versions 1.0.0-beta.10 through 1.0.14 enables an authenticated editor-level user to write attacker-controlled page content and media to arbitrary filesystem locations accessible to the web server process. The root cause is an incomplete fix for a prior related path traversal (GHSA-qjq4-jp55-4mx2) that left the 'suffix' parameter of the PagesController::batchCopy() method unvalidated against directory escape sequences. No public exploit code or CISA KEV listing has been identified at time of analysis; vendor-released patch version 1.0.15 resolves the issue.

Path traversal in Grav CMS before 2.0.15 allows unauthenticated remote attackers to read arbitrary files from sibling directories outside the intended asset root by exploiting a string prefix collision in the static asset handler. The index.php front controller validates asset paths using a simple string prefix check rather than normalized directory-boundary logic, so a request for /assets-private/credentials.yaml passes validation when /assets is the configured base. No public exploit code has been identified and this vulnerability is not in the CISA KEV catalog; the CVSS 4.0 score of 8.2 reflects high confidentiality risk conditioned on a specific deployment layout (AT:P) rather than universal exploitability.

Arbitrary file write via directory traversal in Reportico (reportico-web) through version 8.1.0 lets remote attackers create or overwrite files anywhere the web server user can write, by supplying a crafted path in the 'saveTemplate' parameter together with 'execute_mode=PREPARE' on the run.php endpoint. Because writes can land inside the web root, this is a realistic path to remote code execution (e.g., dropping a PHP web shell). No CISA KEV listing and a low EPSS score (0.37%) indicate no confirmed active exploitation yet, though a third-party vulnerability-research repository is referenced and the flaw is unauthenticated and low-complexity.

Unauthenticated path traversal in reportico-web <= 8.1.0 allows remote attackers to expose PHP source files or execute existing PHP files on the server by manipulating the target_format parameter of the run.php endpoint combined with the execute_mode=EXECUTE directive. The vulnerability requires no authentication and is reachable over the network, meaning any internet-exposed instance is at risk. Publicly available exploit research exists (kilotel/vulnerability-research); no public exploit identified as confirmed actively exploited (CISA KEV). EPSS stands at 0.37% (30th percentile), suggesting low observed exploitation frequency at time of analysis.

Path traversal in JumpServer's KoKo Web Terminal SFTP component (versions 4.8.0 through 4.10.16) allows authenticated users holding SFTP asset permissions to escape the intended SFTP root directory sandbox. The root cause is insufficient path normalization in AssetDir.GetRealPath() (pkg/srvconn/sftp_asset.go), where a naive strings.HasPrefix boundary check is applied before path cleaning, enabling crafted traversal sequences to bypass the root confinement. A low-privileged authenticated attacker can read, list, write, rename, or delete files accessible to the configured backend account on the managed asset, potentially exposing credentials and configuration data beyond the intended access scope. No active exploitation is confirmed and no public exploit has been identified at time of analysis; vendor-released patch 4.10.17 is available.

Recursive arbitrary directory deletion in OpenEMR before 8.2.0 is achievable by an unauthenticated attacker through a two-vulnerability chain: a path traversal flaw in standard_tables_manage.php allows the db GET parameter - passed unsanitized to temp_dir_cleanup() - to resolve outside the intended PHP temporary directory, while an open redirect in dicom_frame.php enables delivery of a crafted URL that triggers this deletion inside an authenticated Superuser's active session. The patch is confirmed in OpenEMR 8.2.0 (released 2026-07-08); no active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis. The potential for irreversible mass deletion of patient records and EHR runtime data makes this a high-priority patching target despite the social-engineering prerequisite.

Path traversal in SWE-agent's trajectory inspector component (sweagent inspector, confirmed v1.1.0) allows unauthenticated remote clients to read arbitrary JSON-formatted files from the host by injecting parent-directory sequences into the /trajectory/ HTTP endpoint. The inspector server binds to all network interfaces (0.0.0.0) with wildcard CORS and no authentication, meaning any network-reachable client or a malicious web page visited in a browser on the same host can exploit this directly without any credentials or special tooling. Disclosure is architecturally constrained to files parseable as trajectory JSON, but those files routinely capture repository contents, shell command output, and secrets or API keys recorded during prior agent sessions, making the practical impact significant despite the format restriction.

Path traversal in Evidently UI's dataset materialization endpoint exposes arbitrary host filesystem files to unauthenticated remote attackers. The filename parameter in the materialization API is unsanitized, enabling directory traversal sequences or absolute paths to escape the workspace directory; the materialized file is then retrievable via the download endpoint. No active exploitation has been confirmed (not listed in CISA KEV), and no patched version has been identified at time of analysis - all known versions remain vulnerable per the wildcard CPE.

Arbitrary file read in Hugging Face Transformers allows an attacker who controls a model checkpoint index file to exfiltrate files from the host filesystem outside the intended model directory. The library fails to sanitize shard filenames in checkpoint index files before joining them to directory paths, meaning maliciously crafted entries containing parent-directory sequences or absolute paths resolve to unintended locations. Any user or automated pipeline that loads an attacker-supplied checkpoint - for example, by downloading a model from an untrusted Hub repository - can have host files disclosed without code execution. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.

Path traversal (CWE-22) in HashiCorp Packer's third-party plugin installer through version 1.15.4 permits a crafted plugin archive to write files outside the intended extraction directory, enabling code execution on the host. Users who install plugins from malicious or compromised sources trigger the vulnerability through the normal `packer plugins install` workflow. No public exploit code has been identified at time of analysis, and a vendor-released fix is available in Packer 1.16.0.

Zip Slip path traversal in Notepad++'s bundled WinGup update component (versions prior to 8.9.7) allows network-delivered malicious ZIP archives to overwrite DLL files outside the intended extraction directory, enabling arbitrary code execution when Notepad++ next loads the affected plugin. The attack requires user interaction to trigger the update workflow (CVSS UI:R) but demands no authentication on the target system. No public exploit code or CISA KEV listing has been identified at time of analysis; the vulnerability is fixed in the vendor-released 8.9.7 build.

Path traversal in Notepad++ before version 8.9.7 enables local attackers with write access to the user's profile directory to read arbitrary user-readable files outside the designated backup folder by poisoning session.xml. The backupFilePath attribute is validated with std::wstring::starts_with against the expected backup directory prefix but without prior path normalization, allowing dot-dot sequences to bypass the check during snapshot-mode session restoration and load an out-of-bounds file into an editor tab. No public exploit code or active exploitation has been identified at the time of analysis; the vendor released a confirmed fix in version 8.9.7.

Path traversal in ApostropheCMS's import-export module (versions prior to 3.6.2) allows an authenticated contributor to exfiltrate host files and expose them publicly via the CMS uploads URL. By importing a crafted `.tar.gz` archive with `../` sequences embedded in the `_id`, `name`, or `extension` fields of `aposAttachments.json`, an attacker causes the module to reconstruct a source path that escapes the extraction directory, reading any host file whose name ends with an allow-listed extension and copying it to a publicly accessible, unauthenticated uploads endpoint. No public exploit is identified at time of analysis; vendor-released patch is available in version 3.6.2.

Path traversal in uniget CLI's hook filename handling exposes arbitrary local filesystem files to any user able to invoke the `uniget hooks edit` or `hooks remove` subcommands, affecting all releases prior to v0.27.6. The root cause in hooks.go is direct string concatenation of the unsanitized `args[0]` value with `preInstallHooksDir`, allowing `../` sequences to escape the designated hooks directory entirely. A publicly available proof-of-concept included in GHSA-m6jg-wr9m-cg2f demonstrates reading `/etc/passwd` in a single command; no public exploit is independently weaponized and the vulnerability is not listed in CISA KEV, but the PoC lowers the exploitation bar substantially for anyone with CLI access.

Arbitrary file deletion in Terragrunt before v1.0.4 allows an attacker who controls a remote module source to delete any file accessible to the Terragrunt process by embedding directory traversal paths in a forged `.terragrunt-module-manifest` file within the module. The deletion occurs automatically during the module download and initialization phase - before OpenTofu or Terraform executes - making CI/CD pipelines that consume external modules particularly exposed. No public exploit has been identified and no CISA KEV listing exists; a vendor-released patch is available in v1.0.4. Note: an 'RCE' tag in the source metadata directly contradicts the vendor advisory's explicit statement that this is a deletion-only primitive with no code execution or data exfiltration capability.

Path traversal in PostCSS's automatic source map loading allows arbitrary `.map` file disclosure when untrusted CSS is processed without explicitly opting out. Specifically, `lib/previous-map.js` constructs file paths from attacker-controlled `sourceMappingURL` comment values without sandboxing directory traversal sequences, enabling an attacker who can supply CSS to a PostCSS-processing service to exfiltrate `sourcesContent` from any `.map` file reachable by the process. The flaw affects all PostCSS versions from 8.0.0 through 8.5.17; no public exploit or CISA KEV listing has been confirmed at time of analysis, though the GHSA advisory provides a detailed attack scenario.

Path traversal in Microsoft Kiota's AI plugin manifest generator allows an attacker who controls or tampers with the OpenAPI description input to inject percent-encoded file references - including double-encoded sequences, NUL-byte payloads, and Unicode full-width homoglyphs - that bypass the IsSafeFileReference validator and are written verbatim into the generated plugin manifest. When an AI host deploys and resolves the manifest, it can access files outside the intended package boundary, leading to disclosure of sensitive files such as /etc/passwd. The vulnerability affects nuget/Microsoft.OpenApi.Kiota versions prior to 1.29.1 and 1.30.0 through 1.33.x; no public exploit or active exploitation is confirmed at time of analysis.

Path traversal in Dell ObjectScale (versions prior to 4.3.0.1) enables a local low-privileged attacker to write to or corrupt files outside intended directory boundaries, achieving high integrity and availability impact without requiring user interaction. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) confirms exploitation requires only a local account with minimal privilege - no elevated rights or user interaction needed. No public exploit code or CISA KEV listing has been identified at time of analysis; risk is primarily from insider threats or attacker-controlled service accounts in post-compromise scenarios.

Path traversal in Dell ObjectScale before version 4.3.0.1 enables a local, low-privileged attacker to read files outside the intended directory scope, resulting in partial information disclosure. The CVSS 3.3 (Low) score reflects the constrained attack surface - local authenticated access and an existing low-privileged account are prerequisites, and impact is limited to confidentiality with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis.

Arbitrary file write outside the extraction destination is possible in extract-zip 2.0.1 and earlier due to an incomplete symlink containment check that validates only the parent directory of each archive entry, not the entry's own final path component. An attacker who can supply a crafted ZIP archive - containing a symlink followed by a same-named regular file - causes extract-zip to plant the symlink during extraction and then write attacker-controlled content through it to any path writable by the process. No public exploit code and no CISA KEV listing are identified at time of analysis, but the attack primitive is a well-understood class (zip slip via symlink chain), lowering effective exploitation complexity for a motivated actor.

Path traversal in Progress ShareFile Storage Zones Controller v5.12.5 and below enables an authenticated party holding valid zone credentials to write arbitrary content to any filesystem location accessible by the application's service account via the resumable upload initiation endpoint. By manipulating path parameters in upload requests, the attacker can plant attacker-controlled files outside intended storage boundaries, with the vendor explicitly noting this may result in execution of attacker-supplied code. No public exploit identified at time of analysis and no CISA KEV listing, but the direct path to code execution and the vendor-confirmed scope make this a high-priority patch target for on-premises deployments.

Path traversal in the jahlives openssl_encrypt plugin (versions before 1.4.0) permits unauthenticated remote attackers to escape the intended plugin configuration directory by supplying crafted plugin_id values containing sequences such as '../'. The _is_safe_path method fails to sanitize the plugin_id parameter before using it to construct filesystem paths, exposing arbitrary server-side files readable by the application process. No active exploitation is confirmed (not in CISA KEV) and no public POC has been identified at time of analysis, though the network-accessible, zero-authentication attack profile makes this straightforward to exploit from the vulnerability description alone.

Arbitrary file read and deletion in SiYuan kernel before v3.7.4 arises from an unvalidated id parameter in the database_clean MCP tool, letting an authenticated MCP client traverse the filesystem to copy any process-readable file into the history directory and then delete the original. This is the MCP-facing twin of a flaw previously fixed on the HTTP API path (GHSA-7hm9-v7vf-7g4w), meaning a known-bad code pattern survived in a second caller. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis and not listed in CISA KEV.

Directory traversal and reported remote code execution in Pronis Loisirs Billetterie CSE (all versions prior to April 2026) expose sensitive server-side files to unauthenticated remote attackers. A public proof-of-concept repository is available on GitHub, materially lowering the skill barrier for exploitation. EPSS sits at 0.40% (34th percentile), indicating limited observed exploitation activity at time of analysis; no CISA KEV listing is confirmed.

Unauthenticated directory traversal in hermes-studio v.0.6.26 exposes arbitrary server-side files through the api/hermes/download endpoint, where the validatePath function fails to adequately restrict path sequences supplied by the caller. The flaw (CWE-22) enables a remote attacker with no credentials to retrieve sensitive files - including configuration files, credentials, and OS artifacts - bounded only by the filesystem permissions of the server process. Publicly available exploit code exists in a GitHub repository; EPSS places current exploitation probability at 0.26% (18th percentile), indicating low observed exploitation volume at time of analysis with no CISA KEV listing.

Improper access control via path traversal in Mahara's ePortfolio system allows others to reach artefacts (uploaded files/content) they should not see when the file path to an artefact embedded in a page is manipulated. It affects Mahara releases before 25.04.5 and before 26.04.0 and is fixed in those versions. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the impact is unauthorized disclosure of user-owned content rather than server compromise.

Directory traversal in the Kirki WordPress plugin (all versions through 6.1.1) allows authenticated attackers with editor-level access to read arbitrary files on the server by exploiting a flawed strpos()-based path validation guard in the plugin's AJAX ExportImport handler. By crafting a 'data' parameter value that embeds the uploads directory path as a substring while appending directory traversal sequences, an attacker can escape the intended upload directory restriction and retrieve sensitive files such as wp-config.php containing database credentials and secret keys. No active exploitation has been confirmed and no CISA KEV listing exists; the CVSS score of 4.9 (Medium) reflects the high privilege requirement, though the confidentiality impact is rated High due to the severity of files that can be exposed as a precursor to full site compromise.

Path traversal in the WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.131 lets an attacker who possesses a valid site-to-site transfer key write a plugin-generated log file into any writable directory, including the web root, because an unsanitised value from the request is used to build the log file path. Publicly available exploit code exists (WPScan), but the impact is bounded: only the file's location is attacker-controlled while the filename suffix and the file contents (the plugin's own log header) are fixed, so this is arbitrary file placement rather than arbitrary content injection. Not listed in CISA KEV and EPSS is low (0.16%, 6th percentile), indicating little observed real-world exploitation.

Directory traversal in the StoreEngine WordPress plugin (Kodezen) through version 2.1.1 exposes arbitrary server files to authenticated users holding vendor-level access or higher. The flaw resides in the `parse_file_path` function, which insufficiently sanitizes file path input across the plugin's download handler and multi-vendor addon components, allowing path sequences to escape the intended directory. No public exploit code has been identified at time of analysis, and no CISA KEV listing is present, but the confidentiality impact is high given that readable files may include WordPress configuration, database credentials, or private keys.

Arbitrary file deletion in the ProSolution WP Client WordPress plugin (all versions through 2.0.8) lets unauthenticated attackers remove any file the web server can write to, escalating to full site takeover when critical files like wp-config.php are deleted. The flaw stems from missing path validation in the proSol_fileDeleteProcess handler, which trusts a traversal key that the attacker plants in their own session via a preceding proSol_fileUploadModalProcess call; both steps require only the publicly exposed frontend nonce. No public exploit identified at time of analysis, but the network, no-auth, no-interaction profile and 9.1 CVSS make this a high-priority patch.

Arbitrary file write in Pandora (pandora-analysis), an open-source file/malware analysis platform, arises from unsafe TAR extraction where archive member names were passed to Python's tarfile.extract() without a safety filter. An attacker who submits a crafted TAR containing ../ sequences or absolute paths can write files outside the intended extraction directory, potentially overwriting files owned by the Pandora worker and escalating to code execution or denial of service. No public exploit identified at time of analysis, though the upstream fix commit is public and the flaw is trivially reproducible.

Arbitrary file deletion in the Link Library WordPress plugin (all versions through 7.9.4) lets unauthenticated attackers submit a malicious link whose crafted path traversal payload causes an arbitrary file on the server to be deleted when an administrator later removes the link; deleting wp-config.php can escalate to remote code execution by dropping WordPress into its setup routine. Reported by Wordfence and fixed in 7.9.5, this issue carries a 9.1 CVSS but has no public exploit identified at time of analysis and is not on CISA KEV, and real exploitation hinges on a non-default plugin option being enabled. Impact is integrity and availability loss with a plausible path to full site takeover.

Arbitrary file deletion in the RapiSafe - Secure Multi File Upload for Contact Form 7 WordPress plugin (versions through 1.0.4) lets unauthenticated attackers delete any file the web server can write to, and deleting wp-config.php can pivot to remote code execution by forcing WordPress into its installer flow. The flaw stems from missing path validation in the handleAjaxRemoveUpload AJAX handler, and the CSRF nonce that gates the handler is leaked to any anonymous visitor as RSMFCF7Vars.nonce in the page's public JavaScript, neutralizing the only access control. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the CVSS base score is 9.1 (Critical).

Red Hat Quay 3 and Red Hat OpenShift Update Service expose an unauthenticated security scanner notification endpoint when the SECURITY_SCANNER_V4_PSK (pre-shared key) is absent, enabling remote unauthenticated attackers to flood the notification queue and inject path traversal characters into outbound Clair API URL paths. The primary impact is worker resource exhaustion leading to denial of service, with a secondary low-integrity impact from blind path manipulation against the configured Clair vulnerability scanner host. No public exploit identified at time of analysis, and EPSS of 0.26% (17th percentile) indicates low current exploitation probability.

Unauthenticated path traversal in the token-optimizer-mcp dashboard server (npm package @ooples/token-optimizer-mcp v5.0.1) allows any network-accessible attacker to read arbitrary .jsonl files from the server's filesystem by supplying a crafted sessionId parameter to /api/session-summary or /api/session-events. The CVSS vector (PR:N, AV:N, AC:L, UI:N) confirms zero authentication or user interaction is required, and a working proof-of-concept demonstrating successful out-of-bounds file exfiltration has been publicly disclosed in GHSA-76pc-mqxp-3rq5. No active exploitation has been confirmed by CISA KEV, but the trivial exploitation complexity and public PoC make this an immediate priority for any internet-exposed deployment.

Sensitive file disclosure in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 is possible through a path traversal flaw (CWE-22) that allows attackers to escape a restricted directory boundary and read files outside the intended accessible path, resulting in high confidentiality impact. The CVE description attributes the exposure to a remote authenticated attacker, though this conflicts with the NVD-assigned CVSS vector - a discrepancy security teams must resolve before finalizing triage. A vendor patch is available via IBM Support advisory node/7283359; no public exploit code or CISA KEV listing has been identified at time of analysis.

Arbitrary file deletion in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 is achievable by remote authenticated attackers holding only low-privileged credentials, exploiting a path traversal flaw that bypasses directory boundary enforcement to reference and delete files anywhere on the target filesystem. The CVSS 3.1 score of 8.1 reflects high integrity and availability impact with low attack complexity, though the EPSS score of 0.44% at the 37th percentile signals limited observed exploitation probability at time of analysis. No public exploit code has been identified and this vulnerability does not appear in the CISA KEV catalog.

Arbitrary file write via path traversal in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 enables remote unauthenticated attackers to place files at any location on the underlying IBM i system. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C/I:H) confirms network-reachable exploitation without authentication, with a scope change indicating impact beyond the Db2 Mirror application itself - reaching OS-level paths. No public exploit or KEV listing has been identified at time of analysis, and an EPSS of 0.59% (46th percentile) suggests low observed exploitation activity despite the high CVSS base score.

Path traversal in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 exposes sensitive filesystem content to remote authenticated attackers via improper validation of user-supplied file paths. The CVSS 6.5 score (AV:N/AC:L/PR:L/UI:N) reflects network-accessible, low-complexity exploitation requiring only a low-privileged account, with high confidentiality impact and no integrity or availability loss. No active exploitation is confirmed (not listed in CISA KEV), no public proof-of-concept has been identified, and EPSS data was not present in the available intelligence.

Arbitrary file write via path traversal in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 exposes systems to unauthenticated remote exploitation. The flaw stems from improper pathname restriction (CWE-22), enabling an attacker to escape the intended directory sandbox and write files to arbitrary filesystem locations. No active exploitation has been confirmed in CISA KEV, and no public proof-of-concept exploit is known at the time of analysis, though the CVSS 8.2 High rating and network-accessible attack vector make this a credible priority for organizations running IBM i environments.

Path traversal in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 enables remote authenticated attackers to read sensitive files outside intended directory boundaries due to improper input validation (CWE-22). The vulnerability results in high confidentiality impact with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis; a vendor-released patch is available via IBM support advisory node 7283359.

Path traversal in KUNBUS RevPiPyLoad 0.11.0 enables local users to delete arbitrary files through the XML-RPC management interface without authenticating to the service, exploiting the daemon's own filesystem privileges via crafted requests. Discovered and reported by Nozomi Networks Labs, the flaw allows an attacker to corrupt configuration files or trigger denial of service on Revolution Pi industrial controllers, with integrity and availability impact classified as high. No public exploit code has been identified at time of analysis, and the product is not listed in the CISA KEV catalog.

Path traversal in KUNBUS RevPiPyLoad 0.11.0 exposes arbitrary file read via the XML-RPC management interface, allowing a local attacker to access sensitive files at daemon-level privileges. Nozomi Networks Labs discovered that the file management functionality of the local management service fails to sanitize directory path input before serving files, enabling escape from the intended file access scope. No public exploit code or CISA KEV listing exists at time of analysis; however, successful exploitation yields high confidentiality impact including potential exposure of credential material and configuration files critical to ICS environments.

Path traversal in Logback-classic versions 0.9.14 through 1.6.2 enables a remote unauthenticated attacker to create and append log files at arbitrary filesystem locations by injecting traversal sequences into an MDC (Mapped Diagnostic Context) value that flows unsanitized into a nested FileAppender path. Deployments using MDC-based discriminators - a pattern frequently triggered by HTTP header values automatically stored in MDC by web frameworks - are directly at risk. No public exploit code or active exploitation has been confirmed at time of analysis; vendor fix notes reference version 1.6.3 as the remediated release.

Path traversal in wvp-GB28181-pro 2.7.4-20260107 exposes arbitrary server-side files through the Log File Download Endpoint in LogController.java, where the unsanitized `fileName` parameter allows directory escape sequences to be supplied by authenticated remote attackers. A public proof-of-concept exploit has been released per the CVSS 4.0 supplemental metric (E:P) and VulDB submission, lowering the bar for exploitation. Impact is limited to low-severity confidentiality loss with no integrity or availability effects, consistent with the CVSS 4.0 score of 2.1 and a PR:L/VC:L vector.

Path traversal in wvp-GB28181-pro 2.7.4-20260107 exposes arbitrary server files through the Snapshot Endpoint in PlayController.java, where the deviceId and channelId parameters are incorporated into file system operations without sanitization. Authenticated remote attackers with low-privilege access can escape the intended snapshot directory by injecting traversal sequences into these parameters, yielding partial confidentiality, integrity, and availability impact. A publicly available proof-of-concept exploit exists on GitHub (issue #2175), materially lowering the barrier to exploitation despite the moderate CVSS 5.3 score and absence from the CISA KEV catalog.

Path traversal in AllData up to version 0.6.8 enables remote unauthenticated attackers to read arbitrary files from the server filesystem via the logDetailCat endpoint. The executorAddress parameter is passed unsanitized to FileInputStream in JobLogController.java, allowing directory traversal sequences to escape the intended file access boundary. A public exploit has been published on GitHub; no patch exists and the vendor has permanently declined to fix the issue by closing the bug report as 'not planned.'

Path traversal in Grav CMS backup profile validation exposes arbitrary server files to authenticated users with profile editor privileges. All Grav versions before 2.0.13 fail to canonicalize or allowlist backup profile root paths, relying instead on an insufficient hard-coded deny-list, allowing traversal sequences such as '../../opt' to be accepted. An attacker holding a profile editor account can configure a malicious backup profile, trigger a backup job, and download an archive containing sensitive files from directories like /opt, /mnt, or /srv that reside entirely outside GRAV_ROOT. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV.

Path traversal in the actix-files Rust crate (versions 0.6.9 and earlier) exposes arbitrary files from the application's working directory to unauthenticated remote attackers. When `Files::new()` receives a non-existent `serve_from` directory, the library silently substitutes an empty base path; subsequent requests join attacker-supplied filenames against this empty root, which Rust's `canonicalize()` resolves relative to the process working directory, enabling direct file disclosure. A publicly available proof-of-concept exploit exists; no confirmed active exploitation (CISA KEV) has been identified at time of analysis.

Path traversal in DTStack Taier 1.4.0's UploadController allows privileged remote attackers to write files outside the intended upload directory by supplying a crafted filename containing sequences such as '../' or absolute paths. The commit diff confirms that `MultipartFile.getOriginalFilename()` output was concatenated directly into a filesystem path without any sanitization before the fix. The CVSS 4.0 PR:H rating constrains exploitation to authenticated high-privilege users; no public exploit code or CISA KEV listing exists at time of analysis.

Path traversal in dromara lamp-cloud (versions up to 5.10.0) exposes the chunk-check endpoint of FileChunkController.java to remote directory traversal via a crafted 'Name' argument, potentially allowing attackers to read or write files outside the intended upload directory. No authentication is required per the CVSS 4.0 vector (PR:N), and a public exploit has been disclosed (CVSS E:P modifier), lowering the barrier for opportunistic exploitation. The vendor was notified via GitHub issue #413 but has not yet responded, leaving no official patch available at time of analysis.

Path traversal in Dromara lamp-cloud up to version 5.10.0 allows remote unauthenticated attackers to manipulate file storage paths via the bucket and bizType parameters in FileAnyoneController.java. The affected endpoint appears intentionally public (indicated by the 'Anyone' controller name), lowering the bar for exploitation significantly. No vendor patch is available at time of analysis, and a public proof-of-concept exploit exists, though no CISA KEV listing confirms active mass exploitation.

Path traversal in DTStack Taier 1.4.0 allows an authenticated administrative user to supply a crafted clusterName containing directory-escape sequences during cluster creation, causing FileUtils.deleteDirectory to operate on arbitrary filesystem paths outside the intended temp directory. The CVSS 4.0 score of 5.1 with PR:H reflects the constrained attack surface: only users with cluster management privileges can trigger the flaw. No public exploit code or CISA KEV listing exists at time of analysis.

Path traversal in DTStack Taier 1.4.0's Chunk-Check Endpoint exposes the server's filesystem to remote unauthenticated attackers who can manipulate the Name parameter in FileChunkController.java to escape the intended upload directory. The Java Paths.get() function processes attacker-controlled input without sanitization, enabling directory traversal sequences to reference arbitrary files accessible to the Taier process. A public proof-of-concept exploit is available via GitHub issue #1203, and no exploitation confirmation from CISA KEV exists at time of analysis.

Path traversal in Dromara lamp-cloud's Code Generator component (DefGenProjectController.java), affecting all versions up to 5.10.0, enables authenticated remote attackers to manipulate the `outputDir`, `parent`, and `projectPrefix` parameters to read or write files outside the application's intended output directory. A proof-of-concept exploit has been publicly disclosed (confirmed by CVSS 4.0 supplemental metric E:P), and no vendor patch is available at time of analysis as the project maintainer has not responded to the responsible disclosure submitted via GitHub issue. The attack requires low-privileged authenticated access, which bounds real-world risk but does not eliminate it in multi-user development or DevOps platforms.

Arbitrary file write in Budibase before 3.40.0 allows authenticated users holding the builder role to plant files with path-traversal sequences that survive the workspace export process, letting them write attacker-controlled content to any location writable by the Budibase server process. The flaw stems from unsanitized S3 object keys whose `..` segments escape the temporary export directory, and successful abuse can pivot to remote code execution or configuration tampering. This is a CVSS 4.0 9.4 issue with no public exploit identified at time of analysis and no CISA KEV listing.

Privilege escalation to root in luci-app-lxc, the LXC container management app for OpenWrt's LuCI web interface, allows low-privileged authenticated users to reach backend container-management routes they should not be authorized for due to an ACL inconsistency, then abuse a path-traversal flaw in the lxc_name parameter to hijack host-side container hooks. Chaining the authorization gap with the traversal yields arbitrary code execution as root on the OpenWrt host. No public exploit identified at time of analysis, but the CVSS 4.0 base score of 9.4 and full host compromise make this critical.

Arbitrary file write in OpenWrt's luci-app-openvpn (the LuCI web-interface plugin for managing OpenVPN) lets an authenticated web user smuggle a path-traversal sequence through the instance_name2 upload parameter to write files anywhere on the device filesystem. Because OpenWrt processes run as root, an attacker can drop an SSH key into a system directory and obtain persistent root code execution across reboots. No public exploit has been identified at time of analysis, but the CVSS 4.0 base score of 9.4 and root-level impact make this a high-priority patch for exposed OpenWrt routers.

Path traversal in Trigger.dev's packet presign API routes (versions 4.4.2 through 4.4.x) allows a holder of any valid project API key to escape the intended packets/<projectRef>/<env>/ object-store prefix by injecting .. sequences into the caller-controlled filename parameter. On multi-organization self-hosted deployments, this enables cross-tenant reads and overwrites of offloaded task payloads and outputs. No public exploit code or CISA KEV listing exists at time of analysis; the CVSS 8.1 (High) rating reflects high confidentiality and integrity impact reachable by any authenticated project member without elevated privileges.

Cross-tenant run replay in Trigger.dev 4.4.2-4.5.0-rc.3 allows any authenticated API key holder to replay task runs belonging to other tenants by supplying a victim's run `friendlyId` to the replay endpoint, which performs no tenant isolation check. This unauthorized replay consumes victim compute resources and re-executes side effects such as outbound API calls, webhook triggers, and database writes. A secondary chained code path further allows attacker-controlled payload bytes - planted via a separate object-store path-traversal - to become input to the victim task when `payloadType: application/store` is in use. No public exploit has been identified at time of analysis, and this CVE is not listed in CISA KEV.

Path traversal in IBM Documentation Offline 1.0.0 through 1.4.1 enables unauthenticated remote attackers to read arbitrary files from the underlying server filesystem. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N vector confirms fully network-accessible exploitation with no privileges or user interaction required, resulting in high confidentiality impact but no integrity or availability loss. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the trivial attack complexity and zero-authentication requirement make exposed instances an immediate patching priority.

Arbitrary file read in HashiCorp Vault Secrets Operator versions 1.3.0 through 1.4.1 lets a low-privileged Kubernetes tenant abuse the AppRole authentication's SecretIDPath configuration to read files from the operator pod's filesystem and exfiltrate their contents to an attacker-controlled endpoint, enabling privilege escalation across the cluster. Because the operator pod typically holds credentials and tokens spanning multiple tenants, a single limited-RBAC tenant can cross trust boundaries (CVSS scope change), yielding a 9.6 rating. No public exploit identified at time of analysis, but the low attack complexity and multi-tenant blast radius make this a high-priority patch.