Path Traversal
Monthly
Path traversal in Microsoft Application Insights Profiler allows an authenticated low-privilege network attacker to escalate privileges, with high confidentiality, integrity, and availability impact. The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N) indicates exploitation requires no special conditions beyond a valid low-privilege account and network reachability, making the barrier to exploitation low. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low complexity and high impact profile warrant prompt remediation.
Arbitrary file write via Zip-Slip in Nx's self-hosted HTTP remote cache extractor allows a malicious or MITM-positioned cache server to overwrite files anywhere on the developer's machine, escalating to remote code execution. Affected are Nx workspaces using self-hosted remote cache (NX_SELF_HOSTED_REMOTE_CACHE_SERVER, @nx/s3-cache, @nx/gcs-cache, @nx/azure-cache, @nx/shared-fs-cache) running nx >= 20.8.0 and < 22.7.7; Nx Cloud and the default local cache are confirmed unaffected. No public exploit code has been identified and this vulnerability is not listed in CISA KEV at time of analysis, but the CVSS 4.0 score of 8.7 and trivial exploitability once positioned reflect significant real-world risk for teams using self-hosted caching.
Route guard bypass in @fastify/static before 10.1.3 exposes protected static files to unauthenticated remote attackers without requiring any credentials. The plugin failed to canonicalize non-standard path forms - including dot segments, duplicate slashes, percent-encoded dots, and backslashes - before matching the request path against route-based guards, allowing crafted URLs to evade the guard while the underlying send layer resolves and serves the protected file. This is an incomplete fix for a prior vulnerability in the same component; no public exploit identified at time of analysis, though the technique is a textbook path normalization bypass requiring no advanced skills.
Unauthenticated arbitrary file read in OpenChamber 1.11.7 lets remote attackers pull any file off the host by setting the allowOutsideWorkspace=true query parameter with an absolute path against the /api/fs/read, /api/fs/stat, and /api/fs/raw endpoints. Because the workspace boundary check in resolveReadPathFromContext relies on a vacuous isPathWithinRoot guard, attackers can harvest the JWT signing secret, SSH private keys, and API credentials, then forge session cookies to fully bypass authentication on password-protected deployments. Reported by VulnCheck with an upstream fix committed; no public exploit identified at time of analysis.
Path traversal in Livebook's notebook import pipeline allows an attacker who supplies a crafted `.livemd` file to write attacker-controlled content to arbitrary filesystem paths accessible by the Livebook process. Affected versions span 0.11.0 through 0.18.6 and 0.19.0 through 0.19.8, and the attack requires no credentials on the target instance - only that the victim open the malicious notebook and trigger a URL entry fetch. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis, but the attack surface is realistic given Livebook's design as a notebook-sharing platform.
Unauthenticated arbitrary file and directory deletion in GitHub Enterprise Server allows any network-reachable attacker to recursively destroy critical instance data - including Git LFS objects, release assets, issue attachments, and user avatars - by injecting a path traversal sequence into the X-GitHub-Request-Id HTTP request header. The vulnerability stems from using this header value unsanitized as a filesystem path component for an upload buffer directory; a deferred cleanup routine then recursively deletes whatever directory the traversal resolves to, including the entire user storage root. No public exploit has been identified at time of analysis and the CVE is not in the CISA KEV catalog, but the near-zero exploitation bar - no authentication, no user interaction, effective even with private mode enabled - makes this a critical priority for any organization running on-premises GitHub Enterprise Server.
Path traversal in rclone's `serve restic` REST API allows any attacker with network access to the endpoint to read, create, overwrite, or delete objects outside the operator-configured backend directory. The flaw spans rclone v1.40 through v1.74.4 and affects WebDAV, FTP, SFTP, HTTP, and Memory backends - but not S3-compatible or local filesystem backends, which encode `..` as literal filename characters. A fully functional, step-by-step proof of concept has been publicly released; no CISA KEV listing exists at time of analysis.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.10.3 enables authenticated remote attackers to read arbitrary files on the underlying system by submitting URLs containing dot-dot sequences (/../). The CVSS scope change metric (S:C) confirms that exploitation reaches beyond the application's own directory boundary, exposing system-level files such as credentials, configuration, or private keys to any low-privileged account holder. No public exploit code has been identified at time of analysis, though IBM has released a patch via advisory node/7282647.
Arbitrary file deletion via path traversal in the Content Egg WordPress plugin (versions up to and including 11.3.0) enables authenticated attackers holding author-level access or higher to delete any file accessible to the PHP process on the server's filesystem. The root cause is that the `img_file` field within `cegg_data` post metadata is sanitized only with `wp_strip_all_tags()` - which removes HTML tags but leaves path traversal sequences intact - stored verbatim in post meta, then concatenated without normalization into a filesystem path inside `getFullImgPath()` (ImageHelper.php:L149) before being passed to PHP's `unlink()`. Deletion of critical WordPress files such as `wp-config.php` can cascade into remote code execution by triggering the WordPress reinstallation flow; no public exploit or CISA KEV listing identified at time of analysis.
Remote code execution and arbitrary file deletion in Zigbee2MQTT stem from an unsanitized path.join() call in ExternalJSExtension.getFilePath() (lib/extension/externalJS.ts), allowing any MQTT client with publish access to escape the extensions directory via traversal sequences and write arbitrary files to the host filesystem. Once the malicious .js file is written, Zigbee2MQTT immediately imports it via Node.js import(), executing attacker-controlled code in the application process context. The same vulnerable code path also backs the extension-removal handler, yielding a second primitive for arbitrary file deletion. No public exploit or KEV listing was identified at time of analysis, but the exploitation path is mechanically straightforward given the detailed description.
Path traversal in Node-RED's library storage API (GET/POST /library/:lib/:type/*path) allows any authenticated user - including those holding read-only scoped API tokens - to read arbitrary files outside the library directory by injecting ../ sequences into the path parameter. Users with write-access credentials can escalate to remote code execution by writing attacker-controlled content to SSH authorized_keys files or system cron directories. This vulnerability is distinct from the previously patched CVE-2021-21298 (Projects API traversal), affects all published Node-RED versions per CPE wildcard, carries no vendor-released patch at time of analysis, and has no confirmed active exploitation or CISA KEV listing.
Arbitrary file write leading to remote code execution in OpenPLC Runtime v3 lets a low-privileged web user upload a crafted Structured Text (.st) program whose embedded `(*FILE:path content*)` directive escapes the intended ./core directory via path traversal. Because the compile_program() sink never calls the project's own validate_file_path() guard, an attacker can plant files such as a cron job or SSH authorized_keys to gain code execution as the runtime user. Exploitation is further eased by OpenPLC's shipped default credentials (openplc:openplc); no public exploit identified at time of analysis and the issue is not in CISA KEV.
Missing authentication in IoTSharp's BlobStorageController lets unauthenticated remote attackers reach Upload, Download, List, Modify, and Delete blob endpoints that every other controller (Devices, Customers, Tenants) guards with [Authorize]. Because the path and filename parameters are written to disk without sanitization, attackers can traverse outside the blob directory to read, alter, or delete arbitrary files - and drop a webshell into a web-accessible path for remote code execution. No public exploit identified at time of analysis, but the combination of unauthenticated access and a clear RCE path makes this trivially weaponizable.
Unauthenticated arbitrary file write in Eclipse Theia 1.73.1 and earlier (browser-mode deployments) allows any cross-origin web page to overwrite files at any absolute path the backend process can access, with a realistic escalation to remote code execution. The `POST /file-upload` handler in `@theia/filesystem` accepts attacker-controlled absolute paths with no workspace boundary check, while a distinct HTTP middleware flaw in `@theia/core` lets the connection token check pass without rejection for tokenless HTTP requests. Because `multipart/form-data` is a CORS-safelisted request type, browsers send the exploit request cross-origin with no preflight and no credentials. No public exploit has been identified at time of analysis, and no CISA KEV listing appears in the provided data, but the attack mechanism is straightforward and requires only that a victim visit an attacker-controlled page.
Path traversal in Eclipse Theia's plugin-hosting HTTP endpoint (versions 1.66.0 through 1.73.1) enables unauthenticated remote attackers to exfiltrate arbitrary files readable by the Theia backend process by injecting percent-encoded directory traversal sequences. The `/hostedPlugin/:pluginId/:path(*)` endpoint passes user-supplied path data directly into `path.resolve()` without subsequently verifying the resolved path stays within the plugin directory boundary. Critically, because plugin IDs are deterministically derived from publisher and plugin name, an attacker can use well-known built-in plugins as traversal anchors without any prior reconnaissance of the target system. No public exploit code or CISA KEV listing has been identified at time of analysis.
Remote file inclusion and path traversal in Eclipse Mojarra 2.3 through 5.0 allows unauthenticated network attackers to force server-side Facelet resolution of attacker-controlled URLs via the `DefaultFaceletFactory` component, exposing restricted files with the privileges of the application server. The attack targets the JSF template resolution pipeline and can leak sensitive configuration data from `WEB-INF/web.xml` (which typically contains database credentials and security settings) or OS-level files such as `/etc/passwd`. SSVC rates the attack as automatable with no confirmed active exploitation at time of analysis, but the CVSS:3.1 AV:N/AC:L/PR:N/UI:N vector means no barriers exist between a remote attacker and a vulnerable endpoint.
Unauthenticated arbitrary file read in Eclipse Theia browser-mode deployments (versions ≤1.73.1) allows any network client to exfiltrate files accessible to the backend process, including paths outside the opened workspace such as SSH keys, cloud credential tokens, and system configuration files. The vulnerability combines two compounding flaws: the `@theia/filesystem` HTTP endpoints perform no workspace confinement when resolving client-supplied URIs to filesystem paths, and a middleware defect in `@theia/core` re-issues the session cookie and calls `next()` without validating the connection token on HTTP requests - token enforcement applies only to WebSocket upgrades, leaving all HTTP file endpoints fully exposed. Electron deployments are explicitly not affected via this path. No public exploit is identified at time of analysis.
Arbitrary file read in art-template's sub-template resolution logic exposes any file accessible to the Node.js process when application code passes externally-controlled input into include() or extend() template directives. The flaw exists in src/compile/adapter/resolve-filename.js, where path.resolve(root, filename) is called without any subsequent validation that the resolved path remains within the root directory - absolute paths silently discard root entirely, and relative traversal sequences (../) are not blocked. With a CVSS base score of 7.5 (AV:N/AC:L/PR:N/UI:N), exploitation is network-accessible and requires no authentication against vulnerable applications; however, no confirmed active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis.
Unauthenticated arbitrary file read in audiobookshelf exploits a URL-encoding normalization gap between the Express authentication-exemption regex (which reads raw percent-encoded req.path) and Express's route parameter decoder (which decodes %2F sequences before handler execution), allowing any remote attacker to traverse the filesystem via crafted cover art requests. This directly bypasses the prior fix for CVE-2025-25205, which had anchored the auth-exemption regex to req.path - meaning the root cause was incompletely remediated. No CISA KEV listing or confirmed public exploit exists at time of analysis, but the AV:N/AC:L/PR:N/UI:N profile and bypass-of-prior-patch nature make this high priority for all internet-facing audiobookshelf deployments.
Arbitrary file deletion in the Custom Fields WordPress plugin before 1.5.1 allows unauthenticated attackers to delete any file on the server - including wp-config.php - leading to full site takeover. Because the plugin fails to validate a user-supplied path before deletion, a remote attacker needs no authentication or user interaction (CVSS 10.0). Publicly available exploit code exists via WPScan, though EPSS is low (0.17%) and the flaw is not listed in CISA KEV.
Arbitrary file write via path traversal in TECNO Mobile's Hi Browser 2.23.1.1 on Android exposes device filesystems to attacker-controlled writes when a user downloads a crafted file with traversal sequences in its filename. Any server delivering a download with a malicious Content-Disposition filename can redirect the saved file outside the intended download directory, potentially overwriting application data or configuration files on the device. No confirmed active exploitation (not in CISA KEV) and an EPSS score of 0.24% (15th percentile) indicate low real-world exploitation probability despite the high CVSS base score.
Path traversal in CVAT versions 1.6.0 through 2.64.0 enables an authenticated, low-privileged attacker with write access to an integrated cloud storage - or permission to add new cloud storage integrations - to overwrite arbitrary files on the server filesystem by embedding traversal sequences in cloud storage file paths processed by the application. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VI:H) confirms network-accessible, low-complexity exploitation requiring only low-privilege access with high integrity impact. No public exploit or CISA KEV listing has been identified at time of analysis.
Path traversal in NVIDIA Dynamo's image loading component on Linux enables unauthenticated remote attackers to read arbitrary files outside the intended restricted directory, resulting in high-severity information disclosure. All releases from version 0 through v1.0.0 are affected, per EUVD-2026-52804 and the NVIDIA product security advisory. No public exploit code or active exploitation has been identified at time of analysis, though the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates low-complexity, authentication-free exploitation against any network-exposed instance.
Path traversal in NVIDIA Triton Inference Server's MLflow plugin allows a low-privileged local user to read, write, or modify files outside the designated model repository by embedding traversal sequences in a model name parameter. All Linux deployments of Triton Inference Server through version 26.02 are affected. No active exploitation has been confirmed (not listed in CISA KEV), EPSS is 0.16% (6th percentile), and SSVC rates exploitation status as none - indicating this is a real but currently low-observed-risk vulnerability that warrants patching on a standard cadence rather than emergency response.
Arbitrary file write in Veeam Service Provider Console (VSPC) lets an authenticated, low-privileged remote attacker plant or overwrite files on the management server via path traversal (CWE-22), which can be escalated to remote code execution on that server. All versions matched by the wildcard CPE are provisionally in scope pending vendor confirmation. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; the CVSS 4.0 base score is 9.0 (Critical), driven by high confidentiality, integrity and availability impact plus subsequent-system impact.
Unauthenticated arbitrary file read in OpenCode Studio before 2.4.4 lets remote attackers pull other users' intermediate audio, video, and subtitle artifacts directly from the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints, and delete any rendered video via the unauthenticated DELETE /api/short-video/:videoId endpoint. Reported by VulnCheck and rated CVSS 4.0 9.3, the flaw exposes both confidentiality and integrity of user job data with no login required. Publicly available exploit code exists, though there is no public exploit identified as being used in active attacks.
Authenticated remote code execution in FlowiseAI Flowise (versions ≤ 3.1.2, npm packages flowise and flowise-components) arises from a vm2 JavaScript sandbox escape reachable through the AgentAsTool, ChatflowTool, and ExecuteFlow nodes, which still run untrusted code in the deprecated in-process vm2 sandbox (useSandbox: false). An attacker who can edit a chatflow injects code via an unvalidated baseURL URL-hash fragment and abuses moment's CVE-2022-24785 path-traversal (whose fix is bypassable inside the sandbox) to break out of vm2 and run arbitrary commands as the Flowise service account, fully compromising the host. A complete working exploit is published in the elttam/GitHub advisory, but the flaw is not in CISA KEV.
Remote unauthenticated file disclosure in perspective-dev/perspective 5.0.0 allows any network attacker to read arbitrary server-side files by injecting literal `../` path traversal segments into HTTP request URLs targeting the CWD static file handler. The sanitization routine strips only query-string parameters, leaving path-based traversal sequences intact and enabling escape from the configured asset root to retrieve sensitive files such as system credentials and application secrets. A publicly available proof-of-concept exploit exists per VulnCheck and researcher disclosure; combined with a wildcard Access-Control-Allow-Origin header on all responses, the vulnerability also enables cross-origin exfiltration through attacker-controlled web pages without any victim interaction.
ASUSTOR Backup Plan (ABP) and EZSync (AES) background services run as NT AUTHORITY\SYSTEM and expose a file-based IPC channel whose AES encryption key is readable by standard users and recoverable via Windows DPAPI, allowing any authenticated local account to forge valid service requests. The services further fail to verify the identity of the requesting process and validate filesystem paths using an insufficient substring check, enabling directory traversal sequences to bypass path restrictions. A local attacker can chain these weaknesses to perform arbitrary file reads and writes as SYSTEM, achieving full local privilege escalation. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Path traversal in Zyxel's ZLD-based firewall firmware (ATP, USG FLEX, USG FLEX 50(W), and USG20(W)-VPN series) allows an authenticated administrator to supply a crafted configuration file path to the CLI execution command, bypassing directory restrictions and achieving arbitrary code execution on the device. All four product lines share the same vulnerable CLI mechanism across wide firmware version ranges, substantially broadening the attack surface for organizations running unpatched appliances. No public exploit or CISA KEV listing has been identified at time of analysis, limiting immediate real-world risk to scenarios involving credential compromise or insider threat.
Unauthenticated path traversal in Rocket.Chat's /custom-sounds/ endpoint allows any remote attacker to read arbitrary files from the server filesystem when the CustomSounds feature is configured to use FileSystem storage. By injecting ../ sequences into the request path, an attacker can exfiltrate sensitive server files such as configuration files, private keys, or credential stores outside the intended sound file directory. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated network vector and high confidentiality impact (CVSS 7.5) make this a serious risk for self-hosted deployments with FileSystem storage enabled.
Path traversal in Apache Jena Fuseki (all versions through 6.1.0) allows unauthenticated remote attackers to read arbitrary files outside the application's intended directory via crafted HTTP requests. The CVSS 3.1 score of 7.5 with High Confidentiality impact and no authentication required (PR:N, AC:L) underscores a low-barrier information disclosure risk against any network-accessible Fuseki instance. No public exploit code or CISA KEV listing has been identified at time of analysis, but the trivial exploitation conditions make this a meaningful priority for organizations exposing Fuseki to untrusted networks.
Unauthenticated path traversal in OpenWrt's luci-app-bmx7 package exposes arbitrary files on affected routers via the bmx7-info CGI endpoint. Attackers can supply directory traversal sequences in the CGI query string to escape the configured runtimeDir and read any file readable by the CGI process, including credentials, network configuration, or cryptographic keys stored on the device. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, though the unauthenticated network attack vector (CVSS 4.0: 8.7) presents a low barrier to opportunistic exploitation against exposed management interfaces.
Path traversal in Grav CMS versions before 2.0.11 enables authenticated editors to disclose arbitrary server-side files to unauthenticated visitors through the image watermark feature. The function ImageMedium::watermark() forwards unsanitized editor-controlled input to the resource locator, whose file:// scheme handler normalizes paths using only lexical '..' collapsing - never verifying containment within the media sandbox - so a crafted Markdown image directive causes the CMS to composite a traversed file into a cached image served at a public, unauthenticated URL. No public exploit has been identified at time of analysis; however, the high confidentiality impact and ease of exploitation once editor access is obtained make this a priority patch for multi-tenant Grav deployments with untrusted editors.
Path traversal in SiYuan's attribute-view read endpoints allows low-privileged users to read arbitrary JSON files outside the intended storage directory on versions before v3.7.3. The avID parameter is unsanitized across all code branches, enabling RoleReader-level authenticated users - or anonymous clients when publish authentication is disabled - to exfiltrate cross-scope database content stored as JSON on the server filesystem. No public exploit has been identified at time of analysis, and a vendor patch is available in v3.7.3.
Path traversal in the DS_SetDestPathCmd() function of NASA Core Flight System (cFS) v7.0.1 enables remote unauthenticated attackers to bypass access controls and read sensitive system components by supplying a crafted destination path string. The DS (Data Storage) application fails to properly sanitize or restrict path values passed via command, violating the intended access control boundary between storage destinations and protected system components. A proof-of-concept exists per SSVC data, and exploitation is assessed as automatable, though real-world risk is tempered by the specialized aerospace deployment context and a very low EPSS score of 0.14% (4th percentile).
Arbitrary file write via path traversal in HuggingFace Transformers (<=5.8.0.dev0, fixed in 5.10.0) enables a supply-chain attacker to overwrite arbitrary files on a victim's filesystem. The flaw exists in `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where dictionary keys from the `chat_template` field in a downloaded `tokenizer_config.json` are used verbatim as filenames with no path sanitization. An attacker need only publish a malicious model repository on HuggingFace Hub; exploitation is triggered when the victim calls `save_pretrained()` after loading the poisoned model. No active exploitation is confirmed (not in CISA KEV), but the attack surface spans all practitioners using the affected `save_pretrained()` path across multiple popular processor families.
Directory traversal in the User Access Manager WordPress plugin (all versions ≤ 2.3.15) permits unauthenticated remote attackers to read arbitrary files from the server filesystem by exploiting a logic flaw in the plugin's file-serving access check. By pairing a path traversal string in the `uamgetfile` parameter with a valid public attachment ID, an attacker causes the plugin's fallback mechanism to approve access against a legitimate public attachment while streaming the attacker-chosen file path - effectively bypassing all access controls. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the zero-prerequisite exploitation conditions (CVSS AV:N/AC:L/PR:N/UI:N) mean that sensitive files such as `wp-config.php` and `.env` are exposed on any affected site with the plugin's file protection feature active.
Directory traversal in the CubeWP Framework WordPress plugin (all versions through 1.1.30) enables unauthenticated attackers to read arbitrary files accessible to the web server process via the cubewp_get_svg_content AJAX handler. The nonce mechanism that gates this endpoint is rendered ineffective because the nonce is publicly emitted into page markup whenever the CubeWP posts shortcode or widget with AJAX loading is active, allowing any guest visitor to harvest it before submitting a malicious request. No public exploit or KEV listing has been identified at time of analysis, but the CVSS 7.5 rating reflects realistic unauthenticated, low-complexity exploitability with full confidentiality impact - targeting files such as wp-config.php containing database credentials and secret keys.
Route-level authentication bypass in Traefik v3.7.0-v3.7.7 allows unauthenticated remote attackers to reach backend endpoints protected by BasicAuth, DigestAuth, or ForwardAuth by exploiting unnormalized dot-segment paths generated by the Kubernetes Ingress NGINX provider's RewriteTarget middleware. When an Ingress path regex captures attacker-controlled text without requiring a path separator (e.g., /api(.*) rewriting to /$1), a crafted request such as /api../admin is rewritten to /../admin and forwarded to a backend that resolves it to /admin - a path secured on a separate Traefik router - entirely bypassing route-level access controls. No public exploit has been identified at time of analysis; a vendor patch is available in v3.7.8.
Arbitrary file deletion via path traversal in the Nex Forms - Ultimate Form Builder - Lite WordPress plugin (versions up to and including 9.2.3) allows authenticated attackers to delete any file on the server, including the critical wp-config.php. The flaw stems from a two-stage attack chain: the insert_record() AJAX handler accepts unsanitized file paths (wp_kses() strips only HTML, not traversal sequences) into a database column, which the delete_file() AJAX handler then passes directly to PHP's unlink() without realpath(), basename(), or allowlist validation. By default this requires admin-level access, but the plugin's configurable user-level option may reduce the privilege requirement to lower roles. No public exploit code or CISA KEV listing has been identified at time of analysis; EPSS data was not provided in the source intelligence.
Local File Inclusion via path traversal in the HUSKY WordPress plugin (versions before 1.4.1) allows authenticated shop managers to cause arbitrary local PHP files to be included and executed on every subsequent front-end request, including those made by unauthenticated visitors. The attack is staged: a privileged user (shop manager) poisons a stored plugin setting with a directory traversal sequence, after which the web server silently executes the targeted local file on every page load without further attacker interaction. A publicly available proof-of-concept exists; EPSS is low at 0.50% (40th percentile), suggesting exploitation has not yet reached broad automated scanning, though the POC lowers the bar significantly for targeted attacks against WooCommerce stores.
Unauthorized arbitrary file deletion in the FormGent WordPress plugin (versions up to and including 1.9.2) allows unauthenticated remote attackers to delete files via the /wp-json/formgent/responses/attachments REST endpoint, which was registered with no authentication middleware. On Linux hosts where the wp-content/uploads/formgent directory has not yet been created (the default post-install state), path-traversal protections can be bypassed to delete files outside the intended directory, including wp-config.php - enabling full site takeover through the fresh-install re-configuration flow. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV, but the CVSS score is 9.1 (Critical).
Unauthenticated directory traversal in the Bit Integrations WordPress plugin (all versions through 2.9.0) allows remote attackers to read arbitrary files from the server via the processAttachment function. The flaw resides in mail action handling (MailController.php) and Contact Form 7 trigger processing (CF7Controller.php), exposing sensitive server files such as wp-config.php, .env files, and credentials to any unauthenticated network attacker. No public exploit or CISA KEV listing has been identified at the time of analysis, but the CVSS vector (AV:N/AC:L/PR:N/UI:N) and EPSS-independent attack simplicity make this a high-priority patching target for affected installations.
Copier CLI and library versions 9.5.0 through 9.16.0 expose a trust-prefix bypass that permits unsafe template features from untrusted repositories to execute on a victim's system after user interaction. The vulnerability arises because Copier's trusted-repository prefix check evaluates the raw percent-encoded URL string, while the underlying HTTP or Git transport subsequently decodes it - meaning a URL containing encoded dot-dot segments (e.g., %2e%2e) or encoded separators (%2f, %5c) can appear to match a trusted prefix while actually resolving to an entirely different, attacker-controlled repository. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code was identified in the provided data; the issue is patched in v9.17.0.
Arbitrary file read in Thumbor prior to 7.8.0 allows unauthenticated remote attackers to read any file accessible to the thumbor process by supplying percent-encoded path traversal sequences via the watermark or frame filter parameters. The root cause is a decode-after-check flaw in file_loader: the security boundary check runs on the raw encoded path (%2e%2e is treated as a literal directory name and passes the abspath/startswith guard), then unquote() is called afterward, converting %2e%2e into real .. segments that the OS then resolves outside FILE_LOADER_ROOT_PATH. A public proof-of-concept exploit is included in the GitHub Security Advisory (GHSA-cj54-hpcc-gj6h); no active exploitation has been confirmed by CISA KEV at time of analysis.
Path traversal and query parameter injection in hashi-vault-js (npm, versions ≤ 0.5.1) allow an attacker who can influence identifiers passed to the library to redirect Vault API requests to arbitrary endpoints - including administrative paths such as `/v1/sys/seal` - or inject unauthorized query parameters, all executed under the permissions of the application's configured Vault token. The vulnerability arises because `Vault.js` contains zero calls to `encodeURIComponent()`, concatenating every caller-supplied identifier directly into HTTP URL strings. Two attack vectors are dynamically confirmed in the GHSA advisory: path traversal via `../../sys/seal` as a secret name, and query injection via `1&list=true` as a version value. No public standalone exploit tool has been identified and this CVE is not listed in the CISA KEV catalog.
Path traversal in NLTK's NKJPCorpusReader component (versions ≤ 3.9.4) allows attackers who control the `fileids` argument to read arbitrary files outside the configured corpus root, fully defeating the `nltk.pathsec` sandbox even when `ENFORCE=True` is active. The root cause is that `add_root()` builds file paths via plain string concatenation - not the hardened `FileSystemPathPointer` - and downstream code calls the Python builtin `open()` directly, bypassing the `validate_path()` check that NLTK's own SECURITY.md explicitly promises will block unauthorized access. A detailed public PoC is confirmed against nltk 3.9.4; no active exploitation is listed in CISA KEV at time of analysis.
Path traversal in NLTK's FramenetCorpusReader (versions ≤3.9.4) allows a caller-supplied frame name containing ../ sequences to escape the corpus root and read arbitrary XML files accessible to the process, silently bypassing the nltk.pathsec sandbox even when ENFORCE=True is explicitly enabled. Any web service or pipeline that routes user-controlled input into FramenetCorpusReader.frame() is directly exposed, with full parsed content of frame-shaped XML files returned to the caller and a file-existence oracle for all other XML paths. A working proof-of-concept is publicly available in the GitHub security advisory; the vulnerability is not listed in CISA KEV at time of analysis.
Path traversal bypass in Apache Kyuubi 1.6.0-1.11.x allows any authenticated client accessing the server via Kyuubi frontend protocols to circumvent the server-side `kyuubi.session.local.dir.allowlist` security control by supplying unprefixed Spark configuration aliases. This represents an incomplete remediation of CVE-2025-66518, meaning the original attack surface was known and partially disclosed before this variant was identified. With CVSS 8.1 (C:H, I:H), exploitation could allow reading or writing arbitrary files accessible to the Kyuubi service account. No public exploit or CISA KEV listing has been identified at time of analysis.
Path traversal arbitrary file read in ComfyUI (comfy-org) before 0.28.0 lets remote unauthenticated attackers probe arbitrary host filesystem paths and exfiltrate image-format files via the /view endpoint. A crafted POST /prompt workflow using LoadImage or sibling loader nodes joins attacker-controlled annotated filenames to a base directory with no containment check, and LoadImage's VALIDATE_INPUTS method causes the engine to skip input-directory validation. Rated CVSS 7.5 (confidentiality-only); no public exploit identified at time of analysis and it is not on CISA KEV.
Unauthenticated information disclosure in ComfyUI (comfy-org/comfyui) before 0.28.0 lets remote attackers read arbitrary image-decodable files and enumerate the host filesystem via the get_model_preview endpoint, which joins an unrestricted {filename:.*} route capture to the model directory with no containment check (CWE-22). Attackers can use literal ../, percent-encoded %2e%2e%2f, absolute paths, or an unbounded path_index to escape the model folder; disclosure is bounded to files Pillow can decode plus a file-existence/path-enumeration oracle. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the issue is fixed in version 0.28.0.
Path traversal file write in the CodeIgniter4 PHP framework prior to 4.7.4 lets remote unauthenticated attackers place uploaded files outside the intended directory whenever an application calls UploadedFile::move() without an explicit second (name) argument. Because the default used the raw client-supplied filename, traversal sequences such as '../../public/shell.php' could drop attacker-controlled content into web-accessible or sensitive locations, potentially enabling code execution on affected sites. No public exploit identified at time of analysis, though the fixing commit ships a regression test that concretely demonstrates the traversal payload.
Server-side request forgery and local file inclusion in Leantime 3.6.2 lets authenticated attackers coerce the server into reading attacker-chosen resources by feeding unsanitized filenames to file_get_contents() inside the Blueprints::import() method. Because the JSON-RPC import endpoint accepts PHP URL wrappers and path-traversal sequences, a low-privileged user with project CREATE rights can pivot to cloud metadata endpoints (e.g. 169.254.169.254) or exfiltrate arbitrary files from the host filesystem. Publicly available exploit code exists (VulnCheck advisory and a GitHub security advisory PoC), though there is no public exploit identified as being actively exploited in the wild.
Arbitrary file read in IBM Langflow OSS versions 1.0.0 through 1.10.1 allows remote unauthenticated attackers to retrieve files outside the intended web root by submitting URLs containing directory-traversal ("../") sequences. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, exploitation needs no authentication or user interaction and can expose sensitive files such as configuration, secrets, or source code. No public exploit identified at time of analysis, and there is no indication of active exploitation.
Arbitrary file disclosure in the Banks Python prompt-templating library (masci/banks) before 2.4.4 lets attackers who control template variables read any file the Python process can access. All four media filters (image, audio, video, document) wrap untrusted input in Path(value) and feed it straight to open(file_path, "rb") with no sanitization, so path traversal (../) reads files like .env, SSH keys, cloud credentials, source, /etc/passwd and /etc/shadow, returning them base64-encoded in the rendered prompt for trivial exfiltration. No public exploit identified at time of analysis and it is not in CISA KEV, but the fix in 2.4.4 is straightforward to reverse-engineer.
Authorization bypass in Tigera Calico, Calico Enterprise, and Calico Cloud allows network-adjacent attackers with no special RBAC to reach HTTP endpoints that Application Layer Policy was configured to restrict. Because Dikastes matched raw request paths without RFC 3986/7230 normalization, requests using path-traversal segments, percent-encoded or backslash separators, repeated slashes, or matrix parameters were authorized under a permitted Prefix rule while the downstream workload or fronting proxy normalized them to the restricted endpoint. A vendor fix exists (PRs 12531/12532/12533, advisory TTA-2026-005); no public exploit identified at time of analysis, and the affected Application Layer Policy feature is disabled by default.
Directory traversal in IBM App Connect Enterprise 13.0.1.0-13.0.7.2 and 12.0.1.0-12.0.12.27 lets a remote unauthenticated attacker write arbitrary files by sending a crafted URL containing '../' sequences. Because attacker-controlled file writes on an integration server can overwrite configuration, deployment artifacts, or executable content, this maps to a full-compromise CVSS 9.8. No public exploit identified at time of analysis, but the vendor (IBM) has released a fix.
Arbitrary file read in IBM App Connect Enterprise (versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27) allows a remote, unauthenticated attacker to retrieve files outside the intended directory via a path traversal flaw (CWE-22), scoring CVSS 7.5. The vector (AV:N/AC:L/PR:N/UI:N) indicates network-reachable exploitation with no privileges or user interaction, though impact is confined to confidentiality (C:H/I:N/A:N). There is no public exploit identified at time of analysis and it is not in CISA KEV, but the low-complexity, no-auth profile makes it a straightforward disclosure risk once details are known.
Remote code execution in VMware vCenter Server (and bundled distributions including Cloud Foundation, vSphere Foundation, Telco Cloud Infrastructure, and Telco Cloud Platform) arises from a directory traversal flaw in the Syslog server component, enabling any actor with network reach to vCenter to run arbitrary code. The CVSS 9.8 vector indicates unauthenticated, low-complexity network exploitation with full confidentiality, integrity, and availability impact. No public exploit identified at time of analysis, and it is not yet listed in CISA KEV, but the vCenter management plane's central role makes this a top-priority patch.
Arbitrary file write in Apache Kyuubi (1.7.0 through 1.11.1) lets a remote attacker abuse the REST batch multipart upload endpoint, which trusts the client-supplied filename, to plant controlled content anywhere the server process can write. Because the server never sanitizes path traversal sequences (../) in the multipart filename, an attacker can escape the intended upload directory and overwrite or create files subject only to filesystem permissions. EPSS is low (0.28%, 21st percentile) and there is no public exploit identified at time of analysis, but the primitive is powerful and the fix is available in 1.12.0.
Path traversal in the IHM Log handling of ASUSTOR ADM (the operating system for ASUSTOR NAS appliances) lets an authenticated attacker manipulate the disk-serial input used to build an IHM log database file path, redirecting the component to read an unintended filesystem path or log database. The CVSS 4.0 score is 7.1 with a confidentiality-only impact and no public exploit identified at time of analysis. Affected releases span ADM 4.1.0 through 4.3.3.RUN1 and ADM 5.0.0 through 5.1.3.RI81.
Arbitrary file write in the VPN Client component of ASUSTOR ADM (the ADM NAS operating system) lets an authenticated, high-privileged attacker place uploaded certificate files outside the intended VPN certificate directory. The flaw stems from insufficient validation of the user-supplied certificate name when building the upload destination path, enabling directory traversal (CWE-22). No public exploit identified at time of analysis; the issue is not listed in CISA KEV and no POC is referenced.
Unauthenticated directory traversal in the DriveLock endpoint-security agent's web service (TCP 6067 by default) lets remote attackers read arbitrary files in the context of the service account by supplying a crafted path that is used unvalidated in file operations. Discovered and reported through Trend Micro's Zero Day Initiative (ZDI-26-287 / ZDI-CAN-28722), it carries a CVSS 3.0 base score of 7.5 with high confidentiality impact and no integrity or availability effect. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated information disclosure in DriveLock's web service (default TCP port 4568) lets remote attackers read arbitrary files via directory traversal, exposing sensitive data in the context of the service account. The flaw stems from missing validation of a user-supplied path before it is used in file operations (CWE-22). Discovered and reported through the Zero Day Initiative (ZDI-26-284 / ZDI-CAN-28746); no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Arbitrary file write in flytohub Flyto Core (the execution kernel for automation and AI-agent workflows) prior to 2.26.6 lets attacker-influenced response bytes be written to any filesystem path the process can reach, because image.download and sibling file-writing modules trust a caller-controlled output_dir instead of routing it through validate_path_with_env_config and the FLYTO_SANDBOX_DIR sandbox. The flaw carries a CVSS 10.0 (scope-changed, high integrity and availability impact) and is fixed in v2.26.6. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Cross-container isolation bypass in proot-distro 5.1.5 and earlier (Termux) lets a crafted backup archive read and write files across otherwise isolated containers when a victim runs 'proot-distro restore'. Because the restore logic trusts the archive's hardlink 'linkname' to name the source container without verifying it matches the container being restored, an attacker who convinces a user to restore a malicious .tar can exfiltrate secrets (SSH keys, API credentials, databases) from one container into an attacker-controlled one, or inject attacker data into a different container. Publicly available exploit code exists (full PoCs are embedded in the GHSA advisory); no public active exploitation is known.
Arbitrary file read in the Balbooa Gridbox page-builder extension for Joomla (all versions before 2.20.2) lets remote unauthenticated attackers read files outside the intended web root through the extension's photo viewer component. The flaw is a classic path traversal (CWE-22) reachable over the network with no authentication or user interaction, enabling disclosure of configuration files, credentials, and other sensitive server content. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Memory corruption in the Cripts scripting framework of Apache Traffic Server (versions 10.0.0 through 10.1.3) allows remote attackers to trigger out-of-bounds writes, use-after-free conditions, and path traversal, primarily resulting in denial of service and partial integrity impact against the caching proxy. The CVSS 4.0 score of 8.3 (High) reflects a network-reachable, no-privilege attack whose success depends on a specific attack requirement (AT:P), such as a Cripts-based configuration being in use. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Arbitrary file read in the Vacron VIN-DS783E-E6 device allows authenticated remote attackers to download arbitrary files from the underlying system by abusing relative path traversal (CWE-23). Any user with valid low-privilege credentials can escape the intended file-serving directory and retrieve sensitive system files such as configuration, credential, or password stores. No public exploit identified at time of analysis; the CVSS 4.0 score of 7.1 reflects network reachability, low attack complexity, and high confidentiality impact without integrity or availability effects.
Arbitrary file disclosure and SSRF in the WP Media Folder Addon WordPress plugin (all versions through 4.1.6) let unauthenticated remote attackers read local files and coerce server-side requests via two AJAX handlers that fail to validate a user-supplied path parameter, but only on sites where a cloud-storage connection is configured. This is an incomplete-fix regression of CVE-2026-9690, which hardened only one cloud-storage handler and left the others exploitable. Publicly available exploit code exists (reported by WPScan); there is no public exploit identified as being used in active attacks and it is not listed in CISA KEV.
Remote file disclosure in openhole-server v0.1.1 and earlier allows unauthenticated attackers to read arbitrary files from tunneled local services. The server forwards URL-decoded request paths, causing percent-encoded dot-segments (%2e%2e) and slashes to be decoded into path traversal sequences (../) before reaching the backend. Exploitation requires a tunneled local service that resolves paths without canonicalization, and the vulnerability is fixed in v0.1.2 by preserving raw percent-encoding.
We need to produce a JSON object with the specified fields. We'll synthesize data from the input. CVE ID: CVE-2026-55389 Description: datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.62.0, datamodel-code-generator resolves JSON Schema $ref targets in src/datamodel_code_generator/parser/jsonschema.py through is_url and _get_ref_body without containing file:// or ../ traversal references to the input directory and without honoring --no-allow-remote-refs, allowing arbitrary local file reads. This issue is fixed in version 0.62.0. CVSS Score: 7.5 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE: CWE-22 Tags: Path Traversal, Datamodel Code Generator CPE: cpe:2.3:a:koxudaxi:datamodel-code-generator:*:*:*:*:*:*:*:* Multi-source intelligence from GitHub Advisory: summary confirms arbitrary local file read via JSON-Schema $ref using file:// or ../ traversal, bypassing --no-allow-remote-refs. Details show code branches that handle local file reads without containment checks. Fixed in 0.62.0. POC? Not explicitly stated, but the issue is described with code fragments and test cases that demonstrate the vulnerability. No KEV mention. EPSS not provided. CWE-22 is path traversal. We need to analyze and fill all fields. product_name: "datamodel-code-generator" (the specific product name, 1-3 words) summary: Synthesize original summary, not copy description. Must start with impact verb and product. "Arbitrary local file read in datamodel-code-generator prior to 0.62.0 allows unauthenticated attackers to read any file on the system via crafted JSON Schema $ref references (file:// or ../ traversal), bypassing the --no-allow-remote-refs control. This is fixed in version 0.62.0. Exploit code exists (public test cases) but no active exploitation reported." Wait, "Arbitrary local file read" is the impact. So summary: "Arbitrary loc
Arbitrary local file read in datamodel-code-generator versions 0.59.0 to 0.61.0 via path traversal in XSD parsing allows unauthenticated attackers who control an input XML Schema to read any file readable by the generator process, with the contents reflected into generated models. A public proof-of-concept exploit exists, and the issue is fixed in version 0.62.0.
Path traversal vulnerability in IBM Aspera Desktop App 1.0.5–1.0.19 allows remote attackers to write files outside the user’s intended download directory by enticing a user to interact with a malicious download request or file. No active exploitation or public exploit code has been identified at the time of analysis, and a vendor patch is available.
Information disclosure in IBM WebSphere Liberty ND Collective Controller, versions 17.0.0.3 through 26.0.0.8, allows remote unauthenticated attackers to read arbitrary files via path-segment injection in the collective routing mechanism. Successful exploitation exposes sensitive configuration data without user interaction or authentication. No public exploit or active exploitation (CISA KEV) has been reported at this time.
Path traversal in Adobe Bridge allows local attackers to read arbitrary files from the victim's file system when a crafted malicious file is opened. Affected versions include all releases up to 15.1.6 and 16.0.5. No active exploitation or public PoC has been identified at this time, and the vendor has issued a fix via APSB26-89.
Path traversal in TinyWeb through 0.0.8 allows unauthenticated remote attackers to read arbitrary files from the server's filesystem by injecting ../ sequences into the URL path, which are concatenated without normalization in HttpBuilder::buildResponse(). Publicly available exploit code exists, yet no active exploitation is recorded in CISA KEV; the risk is elevated when the server runs as root, exposing credential stores and private keys.
Arbitrary file write in @wakaru/cli versions 1.0.0 to 1.3.x allows attackers who can trick a user into running `wakaru --unpack` on a crafted bundle to write files outside the intended output directory. The flaw stems from incomplete sanitization of bundle-controlled filenames containing overlapping path traversal sequences like `....//`, which after sanitization become `../`. Successful exploitation can lead to code execution if an overwritten file is executed later.
Unauthenticated read and write access to sensitive filesystem areas in SICK AppEngine's file access feature allows remote attackers to extract customer-defined passwords, modify application settings, and execute arbitrary Lua code within the sandboxed environment. The vulnerability stems from improper access restrictions on an HTTP-based file access endpoint, which exposes a critical directory without requiring credentials. At the time of analysis, no public exploit or active exploitation (KEV) has been confirmed, but the CVSS 9.4 score reflects the ease of exploitation and high impact.
Arbitrary file deletion in the Better Messages WordPress plugin allows authenticated administrators to delete arbitrary server files by exploiting a path traversal flaw in the delete_sticker function. The vulnerability, present in versions up to 2.15.19, enables an attacker with admin access to craft a URL that bypasses directory restrictions via embedded ../ sequences, potentially leading to remote code execution when critical files such as wp-config.php are deleted. No active exploitation or public proof-of-concept has been reported at this time.
Arbitrary directory deletion in the Demi Backup & Migration WordPress plugin allows unauthenticated attackers to recursively delete any server directory. Affected versions 0.0.7 and earlier store a critical HMAC signing key inside a web‑accessible dotfile in the uploads folder without access control. An attacker who retrieves this key can forge signed AJAX requests to invoke a recursive cleanup routine with an attacker‑supplied absolute path, leading to complete deletion of targeted directories.
We need to produce a comprehensive analysis in JSON format for CVE-2026-17524. The provided data includes description, CVSS, CWE, patch status, CPE, tags, references, EUVD info, and source code diff. We'll synthesize these into the required fields. Let's analyze: - CVE ID: CVE-2026-17524 - Description: Versions of zip-lib before 1.1.0 vulnerable to Directory Traversal via caching mechanism for path validation during extraction. Attacker can bypass security checks (isOutsideTargetFolder) that only checks and caches path status when initial directory symlink is created during first extraction. - CVSS Score: 8.7 (CVSS 4.0 vector given) - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - Patch: Available from vendor (references point to GitHub commit fixing issue) - Reported by: snyk - CPE: cpe:2.3:a:n/a:zip-lib:*:*:*:*:*:*:*:* (note: vendor is "n/a", product is "zip-lib") - Tags: Path Traversal, Zip Lib - ENISA EUVD ID: EUVD-2026-49687, affected versions: zip-lib 0 <1.1.0 - References: snyk advisory, GitHub commit, GitHub issue #14 - Source code evidence: Commit diff shows changes in fs.ts and unzip.ts. The fix involves ensuring folder creation returns symbolic link info and tracks symlink folders in EntryContext; the isOutsideTargetFolder function now checks symlinkFolders. This confirms the vulnerability and the fix. Now, for fields: product_name: "zip-lib" (the specific npm package). Short, 1-3 words. Could also be "zip-lib (npm)" but product_name should be plain "zip-lib". summary: Need 2-3 sentences, original synthesis, not copied. Start with impact verb and product: "Directory traversal in zip-lib before 1.1.0 allows attackers to write files outside the intended extraction directory by exploiting a flawed caching mechanism that only validates symlink paths during initial directory creation." Mention affected product, what attacker can do, exploitation status (no KEV, no POC known? Actually no POC info in provided data;
A sandbox escape vulnerability in Apple operating systems allows a malicious app to break out of its containment and gain full access to the device. Affected versions include iOS and iPadOS prior to 26.6, multiple macOS versions (Sonoma before 14.8.8, Sequoia before 15.7.8, Tahoe before 26.6), and tvOS before 26.6. No public exploit or active exploitation has been identified, and EPSS indicates a low probability of real-world attacks.
Sandbox escape in macOS Sequoia and Tahoe allows a malicious app to break out of its sandbox via a path traversal flaw (CWE-22). Patched in Sequoia 15.7.8 and Tahoe 26.6, the vulnerability enables unauthorized file access from a sandboxed application. No public exploit code is known, and EPSS predicts low exploitation probability (0.16%).
Local privilege escalation in macOS allows a malicious app to gain root privileges through a path traversal vulnerability in directory path handling. Affected versions include macOS Sonoma prior to 14.
Sandbox escape via path traversal in macOS allows a malicious app to read and write files outside its sandbox, potentially accessing sensitive data. Affects macOS versions prior to Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, with no privileges needed but requiring user interaction to launch the crafted app. No active exploitation or public exploit code known at time of analysis; EPSS indicates low exploitation probability.
Local privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability, a path handling flaw in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, enables a low-privileged application to traverse directories and elevate its permissions. No user interaction is required, and no active exploitation or public proof-of-concept has been identified at the time of analysis.
Authenticated low-privilege users of JFrog Artifactory can write arbitrary files outside the intended build artifacts location via a path traversal flaw in archive extraction. The vulnerability allows an attacker who has already obtained limited access to the application to overwrite critical files, potentially escalating to remote code execution. No public exploit or active exploitation has been identified at time of analysis, but the high CVSS score reflects the severe impact if leveraged.
Path traversal in phpMyFAQ's category image deletion allows authenticated attackers to delete arbitrary files, leading to superadmin account creation. Versions before 4.1.6 fail to sanitize the existing_image parameter, permitting deletion of critical files like database.php, which disables the installation gate and exposes the setup wizard. Publicly available exploit code exists, and the issue has been verified by the vendor.
Path traversal in Microsoft Application Insights Profiler allows an authenticated low-privilege network attacker to escalate privileges, with high confidentiality, integrity, and availability impact. The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N) indicates exploitation requires no special conditions beyond a valid low-privilege account and network reachability, making the barrier to exploitation low. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low complexity and high impact profile warrant prompt remediation.
Arbitrary file write via Zip-Slip in Nx's self-hosted HTTP remote cache extractor allows a malicious or MITM-positioned cache server to overwrite files anywhere on the developer's machine, escalating to remote code execution. Affected are Nx workspaces using self-hosted remote cache (NX_SELF_HOSTED_REMOTE_CACHE_SERVER, @nx/s3-cache, @nx/gcs-cache, @nx/azure-cache, @nx/shared-fs-cache) running nx >= 20.8.0 and < 22.7.7; Nx Cloud and the default local cache are confirmed unaffected. No public exploit code has been identified and this vulnerability is not listed in CISA KEV at time of analysis, but the CVSS 4.0 score of 8.7 and trivial exploitability once positioned reflect significant real-world risk for teams using self-hosted caching.
Route guard bypass in @fastify/static before 10.1.3 exposes protected static files to unauthenticated remote attackers without requiring any credentials. The plugin failed to canonicalize non-standard path forms - including dot segments, duplicate slashes, percent-encoded dots, and backslashes - before matching the request path against route-based guards, allowing crafted URLs to evade the guard while the underlying send layer resolves and serves the protected file. This is an incomplete fix for a prior vulnerability in the same component; no public exploit identified at time of analysis, though the technique is a textbook path normalization bypass requiring no advanced skills.
Unauthenticated arbitrary file read in OpenChamber 1.11.7 lets remote attackers pull any file off the host by setting the allowOutsideWorkspace=true query parameter with an absolute path against the /api/fs/read, /api/fs/stat, and /api/fs/raw endpoints. Because the workspace boundary check in resolveReadPathFromContext relies on a vacuous isPathWithinRoot guard, attackers can harvest the JWT signing secret, SSH private keys, and API credentials, then forge session cookies to fully bypass authentication on password-protected deployments. Reported by VulnCheck with an upstream fix committed; no public exploit identified at time of analysis.
Path traversal in Livebook's notebook import pipeline allows an attacker who supplies a crafted `.livemd` file to write attacker-controlled content to arbitrary filesystem paths accessible by the Livebook process. Affected versions span 0.11.0 through 0.18.6 and 0.19.0 through 0.19.8, and the attack requires no credentials on the target instance - only that the victim open the malicious notebook and trigger a URL entry fetch. No active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis, but the attack surface is realistic given Livebook's design as a notebook-sharing platform.
Unauthenticated arbitrary file and directory deletion in GitHub Enterprise Server allows any network-reachable attacker to recursively destroy critical instance data - including Git LFS objects, release assets, issue attachments, and user avatars - by injecting a path traversal sequence into the X-GitHub-Request-Id HTTP request header. The vulnerability stems from using this header value unsanitized as a filesystem path component for an upload buffer directory; a deferred cleanup routine then recursively deletes whatever directory the traversal resolves to, including the entire user storage root. No public exploit has been identified at time of analysis and the CVE is not in the CISA KEV catalog, but the near-zero exploitation bar - no authentication, no user interaction, effective even with private mode enabled - makes this a critical priority for any organization running on-premises GitHub Enterprise Server.
Path traversal in rclone's `serve restic` REST API allows any attacker with network access to the endpoint to read, create, overwrite, or delete objects outside the operator-configured backend directory. The flaw spans rclone v1.40 through v1.74.4 and affects WebDAV, FTP, SFTP, HTTP, and Memory backends - but not S3-compatible or local filesystem backends, which encode `..` as literal filename characters. A fully functional, step-by-step proof of concept has been publicly released; no CISA KEV listing exists at time of analysis.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.10.3 enables authenticated remote attackers to read arbitrary files on the underlying system by submitting URLs containing dot-dot sequences (/../). The CVSS scope change metric (S:C) confirms that exploitation reaches beyond the application's own directory boundary, exposing system-level files such as credentials, configuration, or private keys to any low-privileged account holder. No public exploit code has been identified at time of analysis, though IBM has released a patch via advisory node/7282647.
Arbitrary file deletion via path traversal in the Content Egg WordPress plugin (versions up to and including 11.3.0) enables authenticated attackers holding author-level access or higher to delete any file accessible to the PHP process on the server's filesystem. The root cause is that the `img_file` field within `cegg_data` post metadata is sanitized only with `wp_strip_all_tags()` - which removes HTML tags but leaves path traversal sequences intact - stored verbatim in post meta, then concatenated without normalization into a filesystem path inside `getFullImgPath()` (ImageHelper.php:L149) before being passed to PHP's `unlink()`. Deletion of critical WordPress files such as `wp-config.php` can cascade into remote code execution by triggering the WordPress reinstallation flow; no public exploit or CISA KEV listing identified at time of analysis.
Remote code execution and arbitrary file deletion in Zigbee2MQTT stem from an unsanitized path.join() call in ExternalJSExtension.getFilePath() (lib/extension/externalJS.ts), allowing any MQTT client with publish access to escape the extensions directory via traversal sequences and write arbitrary files to the host filesystem. Once the malicious .js file is written, Zigbee2MQTT immediately imports it via Node.js import(), executing attacker-controlled code in the application process context. The same vulnerable code path also backs the extension-removal handler, yielding a second primitive for arbitrary file deletion. No public exploit or KEV listing was identified at time of analysis, but the exploitation path is mechanically straightforward given the detailed description.
Path traversal in Node-RED's library storage API (GET/POST /library/:lib/:type/*path) allows any authenticated user - including those holding read-only scoped API tokens - to read arbitrary files outside the library directory by injecting ../ sequences into the path parameter. Users with write-access credentials can escalate to remote code execution by writing attacker-controlled content to SSH authorized_keys files or system cron directories. This vulnerability is distinct from the previously patched CVE-2021-21298 (Projects API traversal), affects all published Node-RED versions per CPE wildcard, carries no vendor-released patch at time of analysis, and has no confirmed active exploitation or CISA KEV listing.
Arbitrary file write leading to remote code execution in OpenPLC Runtime v3 lets a low-privileged web user upload a crafted Structured Text (.st) program whose embedded `(*FILE:path content*)` directive escapes the intended ./core directory via path traversal. Because the compile_program() sink never calls the project's own validate_file_path() guard, an attacker can plant files such as a cron job or SSH authorized_keys to gain code execution as the runtime user. Exploitation is further eased by OpenPLC's shipped default credentials (openplc:openplc); no public exploit identified at time of analysis and the issue is not in CISA KEV.
Missing authentication in IoTSharp's BlobStorageController lets unauthenticated remote attackers reach Upload, Download, List, Modify, and Delete blob endpoints that every other controller (Devices, Customers, Tenants) guards with [Authorize]. Because the path and filename parameters are written to disk without sanitization, attackers can traverse outside the blob directory to read, alter, or delete arbitrary files - and drop a webshell into a web-accessible path for remote code execution. No public exploit identified at time of analysis, but the combination of unauthenticated access and a clear RCE path makes this trivially weaponizable.
Unauthenticated arbitrary file write in Eclipse Theia 1.73.1 and earlier (browser-mode deployments) allows any cross-origin web page to overwrite files at any absolute path the backend process can access, with a realistic escalation to remote code execution. The `POST /file-upload` handler in `@theia/filesystem` accepts attacker-controlled absolute paths with no workspace boundary check, while a distinct HTTP middleware flaw in `@theia/core` lets the connection token check pass without rejection for tokenless HTTP requests. Because `multipart/form-data` is a CORS-safelisted request type, browsers send the exploit request cross-origin with no preflight and no credentials. No public exploit has been identified at time of analysis, and no CISA KEV listing appears in the provided data, but the attack mechanism is straightforward and requires only that a victim visit an attacker-controlled page.
Path traversal in Eclipse Theia's plugin-hosting HTTP endpoint (versions 1.66.0 through 1.73.1) enables unauthenticated remote attackers to exfiltrate arbitrary files readable by the Theia backend process by injecting percent-encoded directory traversal sequences. The `/hostedPlugin/:pluginId/:path(*)` endpoint passes user-supplied path data directly into `path.resolve()` without subsequently verifying the resolved path stays within the plugin directory boundary. Critically, because plugin IDs are deterministically derived from publisher and plugin name, an attacker can use well-known built-in plugins as traversal anchors without any prior reconnaissance of the target system. No public exploit code or CISA KEV listing has been identified at time of analysis.
Remote file inclusion and path traversal in Eclipse Mojarra 2.3 through 5.0 allows unauthenticated network attackers to force server-side Facelet resolution of attacker-controlled URLs via the `DefaultFaceletFactory` component, exposing restricted files with the privileges of the application server. The attack targets the JSF template resolution pipeline and can leak sensitive configuration data from `WEB-INF/web.xml` (which typically contains database credentials and security settings) or OS-level files such as `/etc/passwd`. SSVC rates the attack as automatable with no confirmed active exploitation at time of analysis, but the CVSS:3.1 AV:N/AC:L/PR:N/UI:N vector means no barriers exist between a remote attacker and a vulnerable endpoint.
Unauthenticated arbitrary file read in Eclipse Theia browser-mode deployments (versions ≤1.73.1) allows any network client to exfiltrate files accessible to the backend process, including paths outside the opened workspace such as SSH keys, cloud credential tokens, and system configuration files. The vulnerability combines two compounding flaws: the `@theia/filesystem` HTTP endpoints perform no workspace confinement when resolving client-supplied URIs to filesystem paths, and a middleware defect in `@theia/core` re-issues the session cookie and calls `next()` without validating the connection token on HTTP requests - token enforcement applies only to WebSocket upgrades, leaving all HTTP file endpoints fully exposed. Electron deployments are explicitly not affected via this path. No public exploit is identified at time of analysis.
Arbitrary file read in art-template's sub-template resolution logic exposes any file accessible to the Node.js process when application code passes externally-controlled input into include() or extend() template directives. The flaw exists in src/compile/adapter/resolve-filename.js, where path.resolve(root, filename) is called without any subsequent validation that the resolved path remains within the root directory - absolute paths silently discard root entirely, and relative traversal sequences (../) are not blocked. With a CVSS base score of 7.5 (AV:N/AC:L/PR:N/UI:N), exploitation is network-accessible and requires no authentication against vulnerable applications; however, no confirmed active exploitation (CISA KEV) or public proof-of-concept has been identified at time of analysis.
Unauthenticated arbitrary file read in audiobookshelf exploits a URL-encoding normalization gap between the Express authentication-exemption regex (which reads raw percent-encoded req.path) and Express's route parameter decoder (which decodes %2F sequences before handler execution), allowing any remote attacker to traverse the filesystem via crafted cover art requests. This directly bypasses the prior fix for CVE-2025-25205, which had anchored the auth-exemption regex to req.path - meaning the root cause was incompletely remediated. No CISA KEV listing or confirmed public exploit exists at time of analysis, but the AV:N/AC:L/PR:N/UI:N profile and bypass-of-prior-patch nature make this high priority for all internet-facing audiobookshelf deployments.
Arbitrary file deletion in the Custom Fields WordPress plugin before 1.5.1 allows unauthenticated attackers to delete any file on the server - including wp-config.php - leading to full site takeover. Because the plugin fails to validate a user-supplied path before deletion, a remote attacker needs no authentication or user interaction (CVSS 10.0). Publicly available exploit code exists via WPScan, though EPSS is low (0.17%) and the flaw is not listed in CISA KEV.
Arbitrary file write via path traversal in TECNO Mobile's Hi Browser 2.23.1.1 on Android exposes device filesystems to attacker-controlled writes when a user downloads a crafted file with traversal sequences in its filename. Any server delivering a download with a malicious Content-Disposition filename can redirect the saved file outside the intended download directory, potentially overwriting application data or configuration files on the device. No confirmed active exploitation (not in CISA KEV) and an EPSS score of 0.24% (15th percentile) indicate low real-world exploitation probability despite the high CVSS base score.
Path traversal in CVAT versions 1.6.0 through 2.64.0 enables an authenticated, low-privileged attacker with write access to an integrated cloud storage - or permission to add new cloud storage integrations - to overwrite arbitrary files on the server filesystem by embedding traversal sequences in cloud storage file paths processed by the application. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VI:H) confirms network-accessible, low-complexity exploitation requiring only low-privilege access with high integrity impact. No public exploit or CISA KEV listing has been identified at time of analysis.
Path traversal in NVIDIA Dynamo's image loading component on Linux enables unauthenticated remote attackers to read arbitrary files outside the intended restricted directory, resulting in high-severity information disclosure. All releases from version 0 through v1.0.0 are affected, per EUVD-2026-52804 and the NVIDIA product security advisory. No public exploit code or active exploitation has been identified at time of analysis, though the CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates low-complexity, authentication-free exploitation against any network-exposed instance.
Path traversal in NVIDIA Triton Inference Server's MLflow plugin allows a low-privileged local user to read, write, or modify files outside the designated model repository by embedding traversal sequences in a model name parameter. All Linux deployments of Triton Inference Server through version 26.02 are affected. No active exploitation has been confirmed (not listed in CISA KEV), EPSS is 0.16% (6th percentile), and SSVC rates exploitation status as none - indicating this is a real but currently low-observed-risk vulnerability that warrants patching on a standard cadence rather than emergency response.
Arbitrary file write in Veeam Service Provider Console (VSPC) lets an authenticated, low-privileged remote attacker plant or overwrite files on the management server via path traversal (CWE-22), which can be escalated to remote code execution on that server. All versions matched by the wildcard CPE are provisionally in scope pending vendor confirmation. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; the CVSS 4.0 base score is 9.0 (Critical), driven by high confidentiality, integrity and availability impact plus subsequent-system impact.
Unauthenticated arbitrary file read in OpenCode Studio before 2.4.4 lets remote attackers pull other users' intermediate audio, video, and subtitle artifacts directly from the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints, and delete any rendered video via the unauthenticated DELETE /api/short-video/:videoId endpoint. Reported by VulnCheck and rated CVSS 4.0 9.3, the flaw exposes both confidentiality and integrity of user job data with no login required. Publicly available exploit code exists, though there is no public exploit identified as being used in active attacks.
Authenticated remote code execution in FlowiseAI Flowise (versions ≤ 3.1.2, npm packages flowise and flowise-components) arises from a vm2 JavaScript sandbox escape reachable through the AgentAsTool, ChatflowTool, and ExecuteFlow nodes, which still run untrusted code in the deprecated in-process vm2 sandbox (useSandbox: false). An attacker who can edit a chatflow injects code via an unvalidated baseURL URL-hash fragment and abuses moment's CVE-2022-24785 path-traversal (whose fix is bypassable inside the sandbox) to break out of vm2 and run arbitrary commands as the Flowise service account, fully compromising the host. A complete working exploit is published in the elttam/GitHub advisory, but the flaw is not in CISA KEV.
Remote unauthenticated file disclosure in perspective-dev/perspective 5.0.0 allows any network attacker to read arbitrary server-side files by injecting literal `../` path traversal segments into HTTP request URLs targeting the CWD static file handler. The sanitization routine strips only query-string parameters, leaving path-based traversal sequences intact and enabling escape from the configured asset root to retrieve sensitive files such as system credentials and application secrets. A publicly available proof-of-concept exploit exists per VulnCheck and researcher disclosure; combined with a wildcard Access-Control-Allow-Origin header on all responses, the vulnerability also enables cross-origin exfiltration through attacker-controlled web pages without any victim interaction.
ASUSTOR Backup Plan (ABP) and EZSync (AES) background services run as NT AUTHORITY\SYSTEM and expose a file-based IPC channel whose AES encryption key is readable by standard users and recoverable via Windows DPAPI, allowing any authenticated local account to forge valid service requests. The services further fail to verify the identity of the requesting process and validate filesystem paths using an insufficient substring check, enabling directory traversal sequences to bypass path restrictions. A local attacker can chain these weaknesses to perform arbitrary file reads and writes as SYSTEM, achieving full local privilege escalation. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Path traversal in Zyxel's ZLD-based firewall firmware (ATP, USG FLEX, USG FLEX 50(W), and USG20(W)-VPN series) allows an authenticated administrator to supply a crafted configuration file path to the CLI execution command, bypassing directory restrictions and achieving arbitrary code execution on the device. All four product lines share the same vulnerable CLI mechanism across wide firmware version ranges, substantially broadening the attack surface for organizations running unpatched appliances. No public exploit or CISA KEV listing has been identified at time of analysis, limiting immediate real-world risk to scenarios involving credential compromise or insider threat.
Unauthenticated path traversal in Rocket.Chat's /custom-sounds/ endpoint allows any remote attacker to read arbitrary files from the server filesystem when the CustomSounds feature is configured to use FileSystem storage. By injecting ../ sequences into the request path, an attacker can exfiltrate sensitive server files such as configuration files, private keys, or credential stores outside the intended sound file directory. No public exploit code or CISA KEV listing has been identified at time of analysis, but the unauthenticated network vector and high confidentiality impact (CVSS 7.5) make this a serious risk for self-hosted deployments with FileSystem storage enabled.
Path traversal in Apache Jena Fuseki (all versions through 6.1.0) allows unauthenticated remote attackers to read arbitrary files outside the application's intended directory via crafted HTTP requests. The CVSS 3.1 score of 7.5 with High Confidentiality impact and no authentication required (PR:N, AC:L) underscores a low-barrier information disclosure risk against any network-accessible Fuseki instance. No public exploit code or CISA KEV listing has been identified at time of analysis, but the trivial exploitation conditions make this a meaningful priority for organizations exposing Fuseki to untrusted networks.
Unauthenticated path traversal in OpenWrt's luci-app-bmx7 package exposes arbitrary files on affected routers via the bmx7-info CGI endpoint. Attackers can supply directory traversal sequences in the CGI query string to escape the configured runtimeDir and read any file readable by the CGI process, including credentials, network configuration, or cryptographic keys stored on the device. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, though the unauthenticated network attack vector (CVSS 4.0: 8.7) presents a low barrier to opportunistic exploitation against exposed management interfaces.
Path traversal in Grav CMS versions before 2.0.11 enables authenticated editors to disclose arbitrary server-side files to unauthenticated visitors through the image watermark feature. The function ImageMedium::watermark() forwards unsanitized editor-controlled input to the resource locator, whose file:// scheme handler normalizes paths using only lexical '..' collapsing - never verifying containment within the media sandbox - so a crafted Markdown image directive causes the CMS to composite a traversed file into a cached image served at a public, unauthenticated URL. No public exploit has been identified at time of analysis; however, the high confidentiality impact and ease of exploitation once editor access is obtained make this a priority patch for multi-tenant Grav deployments with untrusted editors.
Path traversal in SiYuan's attribute-view read endpoints allows low-privileged users to read arbitrary JSON files outside the intended storage directory on versions before v3.7.3. The avID parameter is unsanitized across all code branches, enabling RoleReader-level authenticated users - or anonymous clients when publish authentication is disabled - to exfiltrate cross-scope database content stored as JSON on the server filesystem. No public exploit has been identified at time of analysis, and a vendor patch is available in v3.7.3.
Path traversal in the DS_SetDestPathCmd() function of NASA Core Flight System (cFS) v7.0.1 enables remote unauthenticated attackers to bypass access controls and read sensitive system components by supplying a crafted destination path string. The DS (Data Storage) application fails to properly sanitize or restrict path values passed via command, violating the intended access control boundary between storage destinations and protected system components. A proof-of-concept exists per SSVC data, and exploitation is assessed as automatable, though real-world risk is tempered by the specialized aerospace deployment context and a very low EPSS score of 0.14% (4th percentile).
Arbitrary file write via path traversal in HuggingFace Transformers (<=5.8.0.dev0, fixed in 5.10.0) enables a supply-chain attacker to overwrite arbitrary files on a victim's filesystem. The flaw exists in `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where dictionary keys from the `chat_template` field in a downloaded `tokenizer_config.json` are used verbatim as filenames with no path sanitization. An attacker need only publish a malicious model repository on HuggingFace Hub; exploitation is triggered when the victim calls `save_pretrained()` after loading the poisoned model. No active exploitation is confirmed (not in CISA KEV), but the attack surface spans all practitioners using the affected `save_pretrained()` path across multiple popular processor families.
Directory traversal in the User Access Manager WordPress plugin (all versions ≤ 2.3.15) permits unauthenticated remote attackers to read arbitrary files from the server filesystem by exploiting a logic flaw in the plugin's file-serving access check. By pairing a path traversal string in the `uamgetfile` parameter with a valid public attachment ID, an attacker causes the plugin's fallback mechanism to approve access against a legitimate public attachment while streaming the attacker-chosen file path - effectively bypassing all access controls. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the zero-prerequisite exploitation conditions (CVSS AV:N/AC:L/PR:N/UI:N) mean that sensitive files such as `wp-config.php` and `.env` are exposed on any affected site with the plugin's file protection feature active.
Directory traversal in the CubeWP Framework WordPress plugin (all versions through 1.1.30) enables unauthenticated attackers to read arbitrary files accessible to the web server process via the cubewp_get_svg_content AJAX handler. The nonce mechanism that gates this endpoint is rendered ineffective because the nonce is publicly emitted into page markup whenever the CubeWP posts shortcode or widget with AJAX loading is active, allowing any guest visitor to harvest it before submitting a malicious request. No public exploit or KEV listing has been identified at time of analysis, but the CVSS 7.5 rating reflects realistic unauthenticated, low-complexity exploitability with full confidentiality impact - targeting files such as wp-config.php containing database credentials and secret keys.
Route-level authentication bypass in Traefik v3.7.0-v3.7.7 allows unauthenticated remote attackers to reach backend endpoints protected by BasicAuth, DigestAuth, or ForwardAuth by exploiting unnormalized dot-segment paths generated by the Kubernetes Ingress NGINX provider's RewriteTarget middleware. When an Ingress path regex captures attacker-controlled text without requiring a path separator (e.g., /api(.*) rewriting to /$1), a crafted request such as /api../admin is rewritten to /../admin and forwarded to a backend that resolves it to /admin - a path secured on a separate Traefik router - entirely bypassing route-level access controls. No public exploit has been identified at time of analysis; a vendor patch is available in v3.7.8.
Arbitrary file deletion via path traversal in the Nex Forms - Ultimate Form Builder - Lite WordPress plugin (versions up to and including 9.2.3) allows authenticated attackers to delete any file on the server, including the critical wp-config.php. The flaw stems from a two-stage attack chain: the insert_record() AJAX handler accepts unsanitized file paths (wp_kses() strips only HTML, not traversal sequences) into a database column, which the delete_file() AJAX handler then passes directly to PHP's unlink() without realpath(), basename(), or allowlist validation. By default this requires admin-level access, but the plugin's configurable user-level option may reduce the privilege requirement to lower roles. No public exploit code or CISA KEV listing has been identified at time of analysis; EPSS data was not provided in the source intelligence.
Local File Inclusion via path traversal in the HUSKY WordPress plugin (versions before 1.4.1) allows authenticated shop managers to cause arbitrary local PHP files to be included and executed on every subsequent front-end request, including those made by unauthenticated visitors. The attack is staged: a privileged user (shop manager) poisons a stored plugin setting with a directory traversal sequence, after which the web server silently executes the targeted local file on every page load without further attacker interaction. A publicly available proof-of-concept exists; EPSS is low at 0.50% (40th percentile), suggesting exploitation has not yet reached broad automated scanning, though the POC lowers the bar significantly for targeted attacks against WooCommerce stores.
Unauthorized arbitrary file deletion in the FormGent WordPress plugin (versions up to and including 1.9.2) allows unauthenticated remote attackers to delete files via the /wp-json/formgent/responses/attachments REST endpoint, which was registered with no authentication middleware. On Linux hosts where the wp-content/uploads/formgent directory has not yet been created (the default post-install state), path-traversal protections can be bypassed to delete files outside the intended directory, including wp-config.php - enabling full site takeover through the fresh-install re-configuration flow. No public exploit identified at time of analysis and the flaw is not listed in CISA KEV, but the CVSS score is 9.1 (Critical).
Unauthenticated directory traversal in the Bit Integrations WordPress plugin (all versions through 2.9.0) allows remote attackers to read arbitrary files from the server via the processAttachment function. The flaw resides in mail action handling (MailController.php) and Contact Form 7 trigger processing (CF7Controller.php), exposing sensitive server files such as wp-config.php, .env files, and credentials to any unauthenticated network attacker. No public exploit or CISA KEV listing has been identified at the time of analysis, but the CVSS vector (AV:N/AC:L/PR:N/UI:N) and EPSS-independent attack simplicity make this a high-priority patching target for affected installations.
Copier CLI and library versions 9.5.0 through 9.16.0 expose a trust-prefix bypass that permits unsafe template features from untrusted repositories to execute on a victim's system after user interaction. The vulnerability arises because Copier's trusted-repository prefix check evaluates the raw percent-encoded URL string, while the underlying HTTP or Git transport subsequently decodes it - meaning a URL containing encoded dot-dot segments (e.g., %2e%2e) or encoded separators (%2f, %5c) can appear to match a trusted prefix while actually resolving to an entirely different, attacker-controlled repository. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code was identified in the provided data; the issue is patched in v9.17.0.
Arbitrary file read in Thumbor prior to 7.8.0 allows unauthenticated remote attackers to read any file accessible to the thumbor process by supplying percent-encoded path traversal sequences via the watermark or frame filter parameters. The root cause is a decode-after-check flaw in file_loader: the security boundary check runs on the raw encoded path (%2e%2e is treated as a literal directory name and passes the abspath/startswith guard), then unquote() is called afterward, converting %2e%2e into real .. segments that the OS then resolves outside FILE_LOADER_ROOT_PATH. A public proof-of-concept exploit is included in the GitHub Security Advisory (GHSA-cj54-hpcc-gj6h); no active exploitation has been confirmed by CISA KEV at time of analysis.
Path traversal and query parameter injection in hashi-vault-js (npm, versions ≤ 0.5.1) allow an attacker who can influence identifiers passed to the library to redirect Vault API requests to arbitrary endpoints - including administrative paths such as `/v1/sys/seal` - or inject unauthorized query parameters, all executed under the permissions of the application's configured Vault token. The vulnerability arises because `Vault.js` contains zero calls to `encodeURIComponent()`, concatenating every caller-supplied identifier directly into HTTP URL strings. Two attack vectors are dynamically confirmed in the GHSA advisory: path traversal via `../../sys/seal` as a secret name, and query injection via `1&list=true` as a version value. No public standalone exploit tool has been identified and this CVE is not listed in the CISA KEV catalog.
Path traversal in NLTK's NKJPCorpusReader component (versions ≤ 3.9.4) allows attackers who control the `fileids` argument to read arbitrary files outside the configured corpus root, fully defeating the `nltk.pathsec` sandbox even when `ENFORCE=True` is active. The root cause is that `add_root()` builds file paths via plain string concatenation - not the hardened `FileSystemPathPointer` - and downstream code calls the Python builtin `open()` directly, bypassing the `validate_path()` check that NLTK's own SECURITY.md explicitly promises will block unauthorized access. A detailed public PoC is confirmed against nltk 3.9.4; no active exploitation is listed in CISA KEV at time of analysis.
Path traversal in NLTK's FramenetCorpusReader (versions ≤3.9.4) allows a caller-supplied frame name containing ../ sequences to escape the corpus root and read arbitrary XML files accessible to the process, silently bypassing the nltk.pathsec sandbox even when ENFORCE=True is explicitly enabled. Any web service or pipeline that routes user-controlled input into FramenetCorpusReader.frame() is directly exposed, with full parsed content of frame-shaped XML files returned to the caller and a file-existence oracle for all other XML paths. A working proof-of-concept is publicly available in the GitHub security advisory; the vulnerability is not listed in CISA KEV at time of analysis.
Path traversal bypass in Apache Kyuubi 1.6.0-1.11.x allows any authenticated client accessing the server via Kyuubi frontend protocols to circumvent the server-side `kyuubi.session.local.dir.allowlist` security control by supplying unprefixed Spark configuration aliases. This represents an incomplete remediation of CVE-2025-66518, meaning the original attack surface was known and partially disclosed before this variant was identified. With CVSS 8.1 (C:H, I:H), exploitation could allow reading or writing arbitrary files accessible to the Kyuubi service account. No public exploit or CISA KEV listing has been identified at time of analysis.
Path traversal arbitrary file read in ComfyUI (comfy-org) before 0.28.0 lets remote unauthenticated attackers probe arbitrary host filesystem paths and exfiltrate image-format files via the /view endpoint. A crafted POST /prompt workflow using LoadImage or sibling loader nodes joins attacker-controlled annotated filenames to a base directory with no containment check, and LoadImage's VALIDATE_INPUTS method causes the engine to skip input-directory validation. Rated CVSS 7.5 (confidentiality-only); no public exploit identified at time of analysis and it is not on CISA KEV.
Unauthenticated information disclosure in ComfyUI (comfy-org/comfyui) before 0.28.0 lets remote attackers read arbitrary image-decodable files and enumerate the host filesystem via the get_model_preview endpoint, which joins an unrestricted {filename:.*} route capture to the model directory with no containment check (CWE-22). Attackers can use literal ../, percent-encoded %2e%2e%2f, absolute paths, or an unbounded path_index to escape the model folder; disclosure is bounded to files Pillow can decode plus a file-existence/path-enumeration oracle. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the issue is fixed in version 0.28.0.
Path traversal file write in the CodeIgniter4 PHP framework prior to 4.7.4 lets remote unauthenticated attackers place uploaded files outside the intended directory whenever an application calls UploadedFile::move() without an explicit second (name) argument. Because the default used the raw client-supplied filename, traversal sequences such as '../../public/shell.php' could drop attacker-controlled content into web-accessible or sensitive locations, potentially enabling code execution on affected sites. No public exploit identified at time of analysis, though the fixing commit ships a regression test that concretely demonstrates the traversal payload.
Server-side request forgery and local file inclusion in Leantime 3.6.2 lets authenticated attackers coerce the server into reading attacker-chosen resources by feeding unsanitized filenames to file_get_contents() inside the Blueprints::import() method. Because the JSON-RPC import endpoint accepts PHP URL wrappers and path-traversal sequences, a low-privileged user with project CREATE rights can pivot to cloud metadata endpoints (e.g. 169.254.169.254) or exfiltrate arbitrary files from the host filesystem. Publicly available exploit code exists (VulnCheck advisory and a GitHub security advisory PoC), though there is no public exploit identified as being actively exploited in the wild.
Arbitrary file read in IBM Langflow OSS versions 1.0.0 through 1.10.1 allows remote unauthenticated attackers to retrieve files outside the intended web root by submitting URLs containing directory-traversal ("../") sequences. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, exploitation needs no authentication or user interaction and can expose sensitive files such as configuration, secrets, or source code. No public exploit identified at time of analysis, and there is no indication of active exploitation.
Arbitrary file disclosure in the Banks Python prompt-templating library (masci/banks) before 2.4.4 lets attackers who control template variables read any file the Python process can access. All four media filters (image, audio, video, document) wrap untrusted input in Path(value) and feed it straight to open(file_path, "rb") with no sanitization, so path traversal (../) reads files like .env, SSH keys, cloud credentials, source, /etc/passwd and /etc/shadow, returning them base64-encoded in the rendered prompt for trivial exfiltration. No public exploit identified at time of analysis and it is not in CISA KEV, but the fix in 2.4.4 is straightforward to reverse-engineer.
Authorization bypass in Tigera Calico, Calico Enterprise, and Calico Cloud allows network-adjacent attackers with no special RBAC to reach HTTP endpoints that Application Layer Policy was configured to restrict. Because Dikastes matched raw request paths without RFC 3986/7230 normalization, requests using path-traversal segments, percent-encoded or backslash separators, repeated slashes, or matrix parameters were authorized under a permitted Prefix rule while the downstream workload or fronting proxy normalized them to the restricted endpoint. A vendor fix exists (PRs 12531/12532/12533, advisory TTA-2026-005); no public exploit identified at time of analysis, and the affected Application Layer Policy feature is disabled by default.
Directory traversal in IBM App Connect Enterprise 13.0.1.0-13.0.7.2 and 12.0.1.0-12.0.12.27 lets a remote unauthenticated attacker write arbitrary files by sending a crafted URL containing '../' sequences. Because attacker-controlled file writes on an integration server can overwrite configuration, deployment artifacts, or executable content, this maps to a full-compromise CVSS 9.8. No public exploit identified at time of analysis, but the vendor (IBM) has released a fix.
Arbitrary file read in IBM App Connect Enterprise (versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27) allows a remote, unauthenticated attacker to retrieve files outside the intended directory via a path traversal flaw (CWE-22), scoring CVSS 7.5. The vector (AV:N/AC:L/PR:N/UI:N) indicates network-reachable exploitation with no privileges or user interaction, though impact is confined to confidentiality (C:H/I:N/A:N). There is no public exploit identified at time of analysis and it is not in CISA KEV, but the low-complexity, no-auth profile makes it a straightforward disclosure risk once details are known.
Remote code execution in VMware vCenter Server (and bundled distributions including Cloud Foundation, vSphere Foundation, Telco Cloud Infrastructure, and Telco Cloud Platform) arises from a directory traversal flaw in the Syslog server component, enabling any actor with network reach to vCenter to run arbitrary code. The CVSS 9.8 vector indicates unauthenticated, low-complexity network exploitation with full confidentiality, integrity, and availability impact. No public exploit identified at time of analysis, and it is not yet listed in CISA KEV, but the vCenter management plane's central role makes this a top-priority patch.
Arbitrary file write in Apache Kyuubi (1.7.0 through 1.11.1) lets a remote attacker abuse the REST batch multipart upload endpoint, which trusts the client-supplied filename, to plant controlled content anywhere the server process can write. Because the server never sanitizes path traversal sequences (../) in the multipart filename, an attacker can escape the intended upload directory and overwrite or create files subject only to filesystem permissions. EPSS is low (0.28%, 21st percentile) and there is no public exploit identified at time of analysis, but the primitive is powerful and the fix is available in 1.12.0.
Path traversal in the IHM Log handling of ASUSTOR ADM (the operating system for ASUSTOR NAS appliances) lets an authenticated attacker manipulate the disk-serial input used to build an IHM log database file path, redirecting the component to read an unintended filesystem path or log database. The CVSS 4.0 score is 7.1 with a confidentiality-only impact and no public exploit identified at time of analysis. Affected releases span ADM 4.1.0 through 4.3.3.RUN1 and ADM 5.0.0 through 5.1.3.RI81.
Arbitrary file write in the VPN Client component of ASUSTOR ADM (the ADM NAS operating system) lets an authenticated, high-privileged attacker place uploaded certificate files outside the intended VPN certificate directory. The flaw stems from insufficient validation of the user-supplied certificate name when building the upload destination path, enabling directory traversal (CWE-22). No public exploit identified at time of analysis; the issue is not listed in CISA KEV and no POC is referenced.
Unauthenticated directory traversal in the DriveLock endpoint-security agent's web service (TCP 6067 by default) lets remote attackers read arbitrary files in the context of the service account by supplying a crafted path that is used unvalidated in file operations. Discovered and reported through Trend Micro's Zero Day Initiative (ZDI-26-287 / ZDI-CAN-28722), it carries a CVSS 3.0 base score of 7.5 with high confidentiality impact and no integrity or availability effect. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Unauthenticated information disclosure in DriveLock's web service (default TCP port 4568) lets remote attackers read arbitrary files via directory traversal, exposing sensitive data in the context of the service account. The flaw stems from missing validation of a user-supplied path before it is used in file operations (CWE-22). Discovered and reported through the Zero Day Initiative (ZDI-26-284 / ZDI-CAN-28746); no public exploit identified at time of analysis, and it is not listed in CISA KEV.
Arbitrary file write in flytohub Flyto Core (the execution kernel for automation and AI-agent workflows) prior to 2.26.6 lets attacker-influenced response bytes be written to any filesystem path the process can reach, because image.download and sibling file-writing modules trust a caller-controlled output_dir instead of routing it through validate_path_with_env_config and the FLYTO_SANDBOX_DIR sandbox. The flaw carries a CVSS 10.0 (scope-changed, high integrity and availability impact) and is fixed in v2.26.6. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.
Cross-container isolation bypass in proot-distro 5.1.5 and earlier (Termux) lets a crafted backup archive read and write files across otherwise isolated containers when a victim runs 'proot-distro restore'. Because the restore logic trusts the archive's hardlink 'linkname' to name the source container without verifying it matches the container being restored, an attacker who convinces a user to restore a malicious .tar can exfiltrate secrets (SSH keys, API credentials, databases) from one container into an attacker-controlled one, or inject attacker data into a different container. Publicly available exploit code exists (full PoCs are embedded in the GHSA advisory); no public active exploitation is known.
Arbitrary file read in the Balbooa Gridbox page-builder extension for Joomla (all versions before 2.20.2) lets remote unauthenticated attackers read files outside the intended web root through the extension's photo viewer component. The flaw is a classic path traversal (CWE-22) reachable over the network with no authentication or user interaction, enabling disclosure of configuration files, credentials, and other sensitive server content. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Memory corruption in the Cripts scripting framework of Apache Traffic Server (versions 10.0.0 through 10.1.3) allows remote attackers to trigger out-of-bounds writes, use-after-free conditions, and path traversal, primarily resulting in denial of service and partial integrity impact against the caching proxy. The CVSS 4.0 score of 8.3 (High) reflects a network-reachable, no-privilege attack whose success depends on a specific attack requirement (AT:P), such as a Cripts-based configuration being in use. There is no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Arbitrary file read in the Vacron VIN-DS783E-E6 device allows authenticated remote attackers to download arbitrary files from the underlying system by abusing relative path traversal (CWE-23). Any user with valid low-privilege credentials can escape the intended file-serving directory and retrieve sensitive system files such as configuration, credential, or password stores. No public exploit identified at time of analysis; the CVSS 4.0 score of 7.1 reflects network reachability, low attack complexity, and high confidentiality impact without integrity or availability effects.
Arbitrary file disclosure and SSRF in the WP Media Folder Addon WordPress plugin (all versions through 4.1.6) let unauthenticated remote attackers read local files and coerce server-side requests via two AJAX handlers that fail to validate a user-supplied path parameter, but only on sites where a cloud-storage connection is configured. This is an incomplete-fix regression of CVE-2026-9690, which hardened only one cloud-storage handler and left the others exploitable. Publicly available exploit code exists (reported by WPScan); there is no public exploit identified as being used in active attacks and it is not listed in CISA KEV.
Remote file disclosure in openhole-server v0.1.1 and earlier allows unauthenticated attackers to read arbitrary files from tunneled local services. The server forwards URL-decoded request paths, causing percent-encoded dot-segments (%2e%2e) and slashes to be decoded into path traversal sequences (../) before reaching the backend. Exploitation requires a tunneled local service that resolves paths without canonicalization, and the vulnerability is fixed in v0.1.2 by preserving raw percent-encoding.
We need to produce a JSON object with the specified fields. We'll synthesize data from the input. CVE ID: CVE-2026-55389 Description: datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.62.0, datamodel-code-generator resolves JSON Schema $ref targets in src/datamodel_code_generator/parser/jsonschema.py through is_url and _get_ref_body without containing file:// or ../ traversal references to the input directory and without honoring --no-allow-remote-refs, allowing arbitrary local file reads. This issue is fixed in version 0.62.0. CVSS Score: 7.5 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE: CWE-22 Tags: Path Traversal, Datamodel Code Generator CPE: cpe:2.3:a:koxudaxi:datamodel-code-generator:*:*:*:*:*:*:*:* Multi-source intelligence from GitHub Advisory: summary confirms arbitrary local file read via JSON-Schema $ref using file:// or ../ traversal, bypassing --no-allow-remote-refs. Details show code branches that handle local file reads without containment checks. Fixed in 0.62.0. POC? Not explicitly stated, but the issue is described with code fragments and test cases that demonstrate the vulnerability. No KEV mention. EPSS not provided. CWE-22 is path traversal. We need to analyze and fill all fields. product_name: "datamodel-code-generator" (the specific product name, 1-3 words) summary: Synthesize original summary, not copy description. Must start with impact verb and product. "Arbitrary local file read in datamodel-code-generator prior to 0.62.0 allows unauthenticated attackers to read any file on the system via crafted JSON Schema $ref references (file:// or ../ traversal), bypassing the --no-allow-remote-refs control. This is fixed in version 0.62.0. Exploit code exists (public test cases) but no active exploitation reported." Wait, "Arbitrary local file read" is the impact. So summary: "Arbitrary loc
Arbitrary local file read in datamodel-code-generator versions 0.59.0 to 0.61.0 via path traversal in XSD parsing allows unauthenticated attackers who control an input XML Schema to read any file readable by the generator process, with the contents reflected into generated models. A public proof-of-concept exploit exists, and the issue is fixed in version 0.62.0.
Path traversal vulnerability in IBM Aspera Desktop App 1.0.5–1.0.19 allows remote attackers to write files outside the user’s intended download directory by enticing a user to interact with a malicious download request or file. No active exploitation or public exploit code has been identified at the time of analysis, and a vendor patch is available.
Information disclosure in IBM WebSphere Liberty ND Collective Controller, versions 17.0.0.3 through 26.0.0.8, allows remote unauthenticated attackers to read arbitrary files via path-segment injection in the collective routing mechanism. Successful exploitation exposes sensitive configuration data without user interaction or authentication. No public exploit or active exploitation (CISA KEV) has been reported at this time.
Path traversal in Adobe Bridge allows local attackers to read arbitrary files from the victim's file system when a crafted malicious file is opened. Affected versions include all releases up to 15.1.6 and 16.0.5. No active exploitation or public PoC has been identified at this time, and the vendor has issued a fix via APSB26-89.
Path traversal in TinyWeb through 0.0.8 allows unauthenticated remote attackers to read arbitrary files from the server's filesystem by injecting ../ sequences into the URL path, which are concatenated without normalization in HttpBuilder::buildResponse(). Publicly available exploit code exists, yet no active exploitation is recorded in CISA KEV; the risk is elevated when the server runs as root, exposing credential stores and private keys.
Arbitrary file write in @wakaru/cli versions 1.0.0 to 1.3.x allows attackers who can trick a user into running `wakaru --unpack` on a crafted bundle to write files outside the intended output directory. The flaw stems from incomplete sanitization of bundle-controlled filenames containing overlapping path traversal sequences like `....//`, which after sanitization become `../`. Successful exploitation can lead to code execution if an overwritten file is executed later.
Unauthenticated read and write access to sensitive filesystem areas in SICK AppEngine's file access feature allows remote attackers to extract customer-defined passwords, modify application settings, and execute arbitrary Lua code within the sandboxed environment. The vulnerability stems from improper access restrictions on an HTTP-based file access endpoint, which exposes a critical directory without requiring credentials. At the time of analysis, no public exploit or active exploitation (KEV) has been confirmed, but the CVSS 9.4 score reflects the ease of exploitation and high impact.
Arbitrary file deletion in the Better Messages WordPress plugin allows authenticated administrators to delete arbitrary server files by exploiting a path traversal flaw in the delete_sticker function. The vulnerability, present in versions up to 2.15.19, enables an attacker with admin access to craft a URL that bypasses directory restrictions via embedded ../ sequences, potentially leading to remote code execution when critical files such as wp-config.php are deleted. No active exploitation or public proof-of-concept has been reported at this time.
Arbitrary directory deletion in the Demi Backup & Migration WordPress plugin allows unauthenticated attackers to recursively delete any server directory. Affected versions 0.0.7 and earlier store a critical HMAC signing key inside a web‑accessible dotfile in the uploads folder without access control. An attacker who retrieves this key can forge signed AJAX requests to invoke a recursive cleanup routine with an attacker‑supplied absolute path, leading to complete deletion of targeted directories.
We need to produce a comprehensive analysis in JSON format for CVE-2026-17524. The provided data includes description, CVSS, CWE, patch status, CPE, tags, references, EUVD info, and source code diff. We'll synthesize these into the required fields. Let's analyze: - CVE ID: CVE-2026-17524 - Description: Versions of zip-lib before 1.1.0 vulnerable to Directory Traversal via caching mechanism for path validation during extraction. Attacker can bypass security checks (isOutsideTargetFolder) that only checks and caches path status when initial directory symlink is created during first extraction. - CVSS Score: 8.7 (CVSS 4.0 vector given) - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - Patch: Available from vendor (references point to GitHub commit fixing issue) - Reported by: snyk - CPE: cpe:2.3:a:n/a:zip-lib:*:*:*:*:*:*:*:* (note: vendor is "n/a", product is "zip-lib") - Tags: Path Traversal, Zip Lib - ENISA EUVD ID: EUVD-2026-49687, affected versions: zip-lib 0 <1.1.0 - References: snyk advisory, GitHub commit, GitHub issue #14 - Source code evidence: Commit diff shows changes in fs.ts and unzip.ts. The fix involves ensuring folder creation returns symbolic link info and tracks symlink folders in EntryContext; the isOutsideTargetFolder function now checks symlinkFolders. This confirms the vulnerability and the fix. Now, for fields: product_name: "zip-lib" (the specific npm package). Short, 1-3 words. Could also be "zip-lib (npm)" but product_name should be plain "zip-lib". summary: Need 2-3 sentences, original synthesis, not copied. Start with impact verb and product: "Directory traversal in zip-lib before 1.1.0 allows attackers to write files outside the intended extraction directory by exploiting a flawed caching mechanism that only validates symlink paths during initial directory creation." Mention affected product, what attacker can do, exploitation status (no KEV, no POC known? Actually no POC info in provided data;
A sandbox escape vulnerability in Apple operating systems allows a malicious app to break out of its containment and gain full access to the device. Affected versions include iOS and iPadOS prior to 26.6, multiple macOS versions (Sonoma before 14.8.8, Sequoia before 15.7.8, Tahoe before 26.6), and tvOS before 26.6. No public exploit or active exploitation has been identified, and EPSS indicates a low probability of real-world attacks.
Sandbox escape in macOS Sequoia and Tahoe allows a malicious app to break out of its sandbox via a path traversal flaw (CWE-22). Patched in Sequoia 15.7.8 and Tahoe 26.6, the vulnerability enables unauthorized file access from a sandboxed application. No public exploit code is known, and EPSS predicts low exploitation probability (0.16%).
Local privilege escalation in macOS allows a malicious app to gain root privileges through a path traversal vulnerability in directory path handling. Affected versions include macOS Sonoma prior to 14.
Sandbox escape via path traversal in macOS allows a malicious app to read and write files outside its sandbox, potentially accessing sensitive data. Affects macOS versions prior to Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.6, with no privileges needed but requiring user interaction to launch the crafted app. No active exploitation or public exploit code known at time of analysis; EPSS indicates low exploitation probability.
Local privilege escalation in Apple operating systems allows a malicious app to gain root privileges. The vulnerability, a path handling flaw in iOS, iPadOS, macOS, tvOS, visionOS, and watchOS, enables a low-privileged application to traverse directories and elevate its permissions. No user interaction is required, and no active exploitation or public proof-of-concept has been identified at the time of analysis.
Authenticated low-privilege users of JFrog Artifactory can write arbitrary files outside the intended build artifacts location via a path traversal flaw in archive extraction. The vulnerability allows an attacker who has already obtained limited access to the application to overwrite critical files, potentially escalating to remote code execution. No public exploit or active exploitation has been identified at time of analysis, but the high CVSS score reflects the severe impact if leveraged.
Path traversal in phpMyFAQ's category image deletion allows authenticated attackers to delete arbitrary files, leading to superadmin account creation. Versions before 4.1.6 fail to sanitize the existing_image parameter, permitting deletion of critical files like database.php, which disables the installation gate and exposes the setup wizard. Publicly available exploit code exists, and the issue has been verified by the vendor.