Path Traversal

Path traversal (CWE-22) in HashiCorp Packer's third-party plugin installer through version 1.15.4 permits a crafted plugin archive to write files outside the intended extraction directory, enabling code execution on the host. Users who install plugins from malicious or compromised sources trigger the vulnerability through the normal `packer plugins install` workflow. No public exploit code has been identified at time of analysis, and a vendor-released fix is available in Packer 1.16.0.

Zip Slip path traversal in Notepad++'s bundled WinGup update component (versions prior to 8.9.7) allows network-delivered malicious ZIP archives to overwrite DLL files outside the intended extraction directory, enabling arbitrary code execution when Notepad++ next loads the affected plugin. The attack requires user interaction to trigger the update workflow (CVSS UI:R) but demands no authentication on the target system. No public exploit code or CISA KEV listing has been identified at time of analysis; the vulnerability is fixed in the vendor-released 8.9.7 build.

Path traversal in PostCSS's automatic source map loading allows arbitrary `.map` file disclosure when untrusted CSS is processed without explicitly opting out. Specifically, `lib/previous-map.js` constructs file paths from attacker-controlled `sourceMappingURL` comment values without sandboxing directory traversal sequences, enabling an attacker who can supply CSS to a PostCSS-processing service to exfiltrate `sourcesContent` from any `.map` file reachable by the process. The flaw affects all PostCSS versions from 8.0.0 through 8.5.17; no public exploit or CISA KEV listing has been confirmed at time of analysis, though the GHSA advisory provides a detailed attack scenario.

Path traversal in Dell ObjectScale (versions prior to 4.3.0.1) enables a local low-privileged attacker to write to or corrupt files outside intended directory boundaries, achieving high integrity and availability impact without requiring user interaction. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) confirms exploitation requires only a local account with minimal privilege - no elevated rights or user interaction needed. No public exploit code or CISA KEV listing has been identified at time of analysis; risk is primarily from insider threats or attacker-controlled service accounts in post-compromise scenarios.

Arbitrary file write outside the extraction destination is possible in extract-zip 2.0.1 and earlier due to an incomplete symlink containment check that validates only the parent directory of each archive entry, not the entry's own final path component. An attacker who can supply a crafted ZIP archive - containing a symlink followed by a same-named regular file - causes extract-zip to plant the symlink during extraction and then write attacker-controlled content through it to any path writable by the process. No public exploit code and no CISA KEV listing are identified at time of analysis, but the attack primitive is a well-understood class (zip slip via symlink chain), lowering effective exploitation complexity for a motivated actor.

Path traversal in Progress ShareFile Storage Zones Controller v5.12.5 and below enables an authenticated party holding valid zone credentials to write arbitrary content to any filesystem location accessible by the application's service account via the resumable upload initiation endpoint. By manipulating path parameters in upload requests, the attacker can plant attacker-controlled files outside intended storage boundaries, with the vendor explicitly noting this may result in execution of attacker-supplied code. No public exploit identified at time of analysis and no CISA KEV listing, but the direct path to code execution and the vendor-confirmed scope make this a high-priority patch target for on-premises deployments.

Path traversal in the jahlives openssl_encrypt plugin (versions before 1.4.0) permits unauthenticated remote attackers to escape the intended plugin configuration directory by supplying crafted plugin_id values containing sequences such as '../'. The _is_safe_path method fails to sanitize the plugin_id parameter before using it to construct filesystem paths, exposing arbitrary server-side files readable by the application process. No active exploitation is confirmed (not in CISA KEV) and no public POC has been identified at time of analysis, though the network-accessible, zero-authentication attack profile makes this straightforward to exploit from the vulnerability description alone.

Arbitrary file read and deletion in SiYuan kernel before v3.7.4 arises from an unvalidated id parameter in the database_clean MCP tool, letting an authenticated MCP client traverse the filesystem to copy any process-readable file into the history directory and then delete the original. This is the MCP-facing twin of a flaw previously fixed on the HTTP API path (GHSA-7hm9-v7vf-7g4w), meaning a known-bad code pattern survived in a second caller. Reported by VulnCheck with a vendor patch available; no public exploit identified at time of analysis and not listed in CISA KEV.

Unauthenticated directory traversal in hermes-studio v.0.6.26 exposes arbitrary server-side files through the api/hermes/download endpoint, where the validatePath function fails to adequately restrict path sequences supplied by the caller. The flaw (CWE-22) enables a remote attacker with no credentials to retrieve sensitive files - including configuration files, credentials, and OS artifacts - bounded only by the filesystem permissions of the server process. Publicly available exploit code exists in a GitHub repository; EPSS places current exploitation probability at 0.26% (18th percentile), indicating low observed exploitation volume at time of analysis with no CISA KEV listing.

Directory traversal and reported remote code execution in Pronis Loisirs Billetterie CSE (all versions prior to April 2026) expose sensitive server-side files to unauthenticated remote attackers. A public proof-of-concept repository is available on GitHub, materially lowering the skill barrier for exploitation. EPSS sits at 0.40% (34th percentile), indicating limited observed exploitation activity at time of analysis; no CISA KEV listing is confirmed.

Improper access control via path traversal in Mahara's ePortfolio system allows others to reach artefacts (uploaded files/content) they should not see when the file path to an artefact embedded in a page is manipulated. It affects Mahara releases before 25.04.5 and before 26.04.0 and is fixed in those versions. No public exploit identified at time of analysis, and it is not listed in CISA KEV; the impact is unauthorized disclosure of user-owned content rather than server compromise.

Path traversal in the WPvivid - Backup, Migration & Staging WordPress plugin before 0.9.131 lets an attacker who possesses a valid site-to-site transfer key write a plugin-generated log file into any writable directory, including the web root, because an unsanitised value from the request is used to build the log file path. Publicly available exploit code exists (WPScan), but the impact is bounded: only the file's location is attacker-controlled while the filename suffix and the file contents (the plugin's own log header) are fixed, so this is arbitrary file placement rather than arbitrary content injection. Not listed in CISA KEV and EPSS is low (0.16%, 6th percentile), indicating little observed real-world exploitation.

Arbitrary file deletion in the ProSolution WP Client WordPress plugin (all versions through 2.0.8) lets unauthenticated attackers remove any file the web server can write to, escalating to full site takeover when critical files like wp-config.php are deleted. The flaw stems from missing path validation in the proSol_fileDeleteProcess handler, which trusts a traversal key that the attacker plants in their own session via a preceding proSol_fileUploadModalProcess call; both steps require only the publicly exposed frontend nonce. No public exploit identified at time of analysis, but the network, no-auth, no-interaction profile and 9.1 CVSS make this a high-priority patch.

Arbitrary file write in Pandora (pandora-analysis), an open-source file/malware analysis platform, arises from unsafe TAR extraction where archive member names were passed to Python's tarfile.extract() without a safety filter. An attacker who submits a crafted TAR containing ../ sequences or absolute paths can write files outside the intended extraction directory, potentially overwriting files owned by the Pandora worker and escalating to code execution or denial of service. No public exploit identified at time of analysis, though the upstream fix commit is public and the flaw is trivially reproducible.

Arbitrary file deletion in the Link Library WordPress plugin (all versions through 7.9.4) lets unauthenticated attackers submit a malicious link whose crafted path traversal payload causes an arbitrary file on the server to be deleted when an administrator later removes the link; deleting wp-config.php can escalate to remote code execution by dropping WordPress into its setup routine. Reported by Wordfence and fixed in 7.9.5, this issue carries a 9.1 CVSS but has no public exploit identified at time of analysis and is not on CISA KEV, and real exploitation hinges on a non-default plugin option being enabled. Impact is integrity and availability loss with a plausible path to full site takeover.

Arbitrary file deletion in the RapiSafe - Secure Multi File Upload for Contact Form 7 WordPress plugin (versions through 1.0.4) lets unauthenticated attackers delete any file the web server can write to, and deleting wp-config.php can pivot to remote code execution by forcing WordPress into its installer flow. The flaw stems from missing path validation in the handleAjaxRemoveUpload AJAX handler, and the CSRF nonce that gates the handler is leaked to any anonymous visitor as RSMFCF7Vars.nonce in the page's public JavaScript, neutralizing the only access control. There is no public exploit identified at time of analysis and it is not in CISA KEV, but the CVSS base score is 9.1 (Critical).

Red Hat Quay 3 and Red Hat OpenShift Update Service expose an unauthenticated security scanner notification endpoint when the SECURITY_SCANNER_V4_PSK (pre-shared key) is absent, enabling remote unauthenticated attackers to flood the notification queue and inject path traversal characters into outbound Clair API URL paths. The primary impact is worker resource exhaustion leading to denial of service, with a secondary low-integrity impact from blind path manipulation against the configured Clair vulnerability scanner host. No public exploit identified at time of analysis, and EPSS of 0.26% (17th percentile) indicates low current exploitation probability.

Sensitive file disclosure in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 is possible through a path traversal flaw (CWE-22) that allows attackers to escape a restricted directory boundary and read files outside the intended accessible path, resulting in high confidentiality impact. The CVE description attributes the exposure to a remote authenticated attacker, though this conflicts with the NVD-assigned CVSS vector - a discrepancy security teams must resolve before finalizing triage. A vendor patch is available via IBM Support advisory node/7283359; no public exploit code or CISA KEV listing has been identified at time of analysis.

Arbitrary file deletion in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 is achievable by remote authenticated attackers holding only low-privileged credentials, exploiting a path traversal flaw that bypasses directory boundary enforcement to reference and delete files anywhere on the target filesystem. The CVSS 3.1 score of 8.1 reflects high integrity and availability impact with low attack complexity, though the EPSS score of 0.44% at the 37th percentile signals limited observed exploitation probability at time of analysis. No public exploit code has been identified and this vulnerability does not appear in the CISA KEV catalog.

Arbitrary file write via path traversal in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 enables remote unauthenticated attackers to place files at any location on the underlying IBM i system. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:C/I:H) confirms network-reachable exploitation without authentication, with a scope change indicating impact beyond the Db2 Mirror application itself - reaching OS-level paths. No public exploit or KEV listing has been identified at time of analysis, and an EPSS of 0.59% (46th percentile) suggests low observed exploitation activity despite the high CVSS base score.

Arbitrary file write via path traversal in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 exposes systems to unauthenticated remote exploitation. The flaw stems from improper pathname restriction (CWE-22), enabling an attacker to escape the intended directory sandbox and write files to arbitrary filesystem locations. No active exploitation has been confirmed in CISA KEV, and no public proof-of-concept exploit is known at the time of analysis, though the CVSS 8.2 High rating and network-accessible attack vector make this a credible priority for organizations running IBM i environments.

Path traversal in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 enables remote authenticated attackers to read sensitive files outside intended directory boundaries due to improper input validation (CWE-22). The vulnerability results in high confidentiality impact with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis; a vendor-released patch is available via IBM support advisory node 7283359.

Arbitrary file write in Budibase before 3.40.0 allows authenticated users holding the builder role to plant files with path-traversal sequences that survive the workspace export process, letting them write attacker-controlled content to any location writable by the Budibase server process. The flaw stems from unsanitized S3 object keys whose `..` segments escape the temporary export directory, and successful abuse can pivot to remote code execution or configuration tampering. This is a CVSS 4.0 9.4 issue with no public exploit identified at time of analysis and no CISA KEV listing.

Privilege escalation to root in luci-app-lxc, the LXC container management app for OpenWrt's LuCI web interface, allows low-privileged authenticated users to reach backend container-management routes they should not be authorized for due to an ACL inconsistency, then abuse a path-traversal flaw in the lxc_name parameter to hijack host-side container hooks. Chaining the authorization gap with the traversal yields arbitrary code execution as root on the OpenWrt host. No public exploit identified at time of analysis, but the CVSS 4.0 base score of 9.4 and full host compromise make this critical.

Arbitrary file write in OpenWrt's luci-app-openvpn (the LuCI web-interface plugin for managing OpenVPN) lets an authenticated web user smuggle a path-traversal sequence through the instance_name2 upload parameter to write files anywhere on the device filesystem. Because OpenWrt processes run as root, an attacker can drop an SSH key into a system directory and obtain persistent root code execution across reboots. No public exploit has been identified at time of analysis, but the CVSS 4.0 base score of 9.4 and root-level impact make this a high-priority patch for exposed OpenWrt routers.

Path traversal in Trigger.dev's packet presign API routes (versions 4.4.2 through 4.4.x) allows a holder of any valid project API key to escape the intended packets/<projectRef>/<env>/ object-store prefix by injecting .. sequences into the caller-controlled filename parameter. On multi-organization self-hosted deployments, this enables cross-tenant reads and overwrites of offloaded task payloads and outputs. No public exploit code or CISA KEV listing exists at time of analysis; the CVSS 8.1 (High) rating reflects high confidentiality and integrity impact reachable by any authenticated project member without elevated privileges.

Path traversal in IBM Documentation Offline 1.0.0 through 1.4.1 enables unauthenticated remote attackers to read arbitrary files from the underlying server filesystem. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N vector confirms fully network-accessible exploitation with no privileges or user interaction required, resulting in high confidentiality impact but no integrity or availability loss. No public exploit has been identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, the trivial attack complexity and zero-authentication requirement make exposed instances an immediate patching priority.

Arbitrary file read in HashiCorp Vault Secrets Operator versions 1.3.0 through 1.4.1 lets a low-privileged Kubernetes tenant abuse the AppRole authentication's SecretIDPath configuration to read files from the operator pod's filesystem and exfiltrate their contents to an attacker-controlled endpoint, enabling privilege escalation across the cluster. Because the operator pod typically holds credentials and tokens spanning multiple tenants, a single limited-RBAC tenant can cross trust boundaries (CVSS scope change), yielding a 9.6 rating. No public exploit identified at time of analysis, but the low attack complexity and multi-tenant blast radius make this a high-priority patch.

Path traversal in IBM i versions 7.3 through 7.6 enables a low-privileged remote authenticated attacker to bypass object-level access controls and gain unauthorized read, write, or disruptive access to arbitrary system objects. The CVSS 8.8 rating reflects full C/I/A impact across a network-accessible attack surface requiring only low privilege - consistent with IBM's own report as originating vendor and the EUVD advisory. No public exploit code has been identified and this vulnerability is not listed in CISA KEV; EPSS at 0.36% (29th percentile) indicates low current exploitation activity, though a vendor patch is now confirmed available.

Relative path traversal in Kibana's Fleet component allows an authenticated low-privileged user to delete arbitrary Kibana resources by supplying a crafted Fleet Server host configuration identifier containing traversal sequences. Elastic has confirmed the flaw in ESA-2026-94 and released patched versions 8.19.17, 9.3.6, and 9.4.3. No public exploit has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog.

Path traversal in Vitest Browser Mode (@vitest/browser) lets any client reachable via the Browser Mode API read, create, overwrite, or delete arbitrary files on the host running the test process, bypassing the allowWrite permission gate entirely. Affected are Vitest before 3.2.7, 4.x before 4.1.10, and the 5.0.0-beta line before 5.0.0-beta.6, where provider commands (upload, takeScreenshot, screenshotMatcher, stopChunkTrace, deleteTracing, annotateTraces) accept browser-supplied paths without confining them to the project root. There is no public exploit identified at time of analysis and it is not in CISA KEV; the highest-impact primitive is the upload command's arbitrary file read.

Arbitrary file write in rsync 2.3.3 through 3.4.4 lets a malicious sender escape a daemon module's root by abusing symlinks that are followed while resolving the --partial-dir or --backup-dir paths, redirecting writes to the module-root parent and beyond. Any rsync daemon exposing a writable module - or a read/write sync where a sender controls symlinks - is exposed, and the CWE-22 path-traversal primitive can be leveraged to overwrite configuration, cron, or authorized_keys files for follow-on code execution. Fixed in v3.5.0; reported by VulnCheck with no public exploit identified at time of analysis.

Path traversal in rsync daemon before 3.5.0 allows remote rsync clients to read and write files outside the configured module root. The root cause is the daemon calling chdir() to the module root at session start without resolving symlinks via realpath(), so if the module root path or any path component is a symlink, subsequent relative-path operations resolve against the symlink target instead of the intended directory. Exploitation requires two server-side conditions - use chroot disabled and a symlink anywhere in the module root path - but no special conditions on the attacker side beyond having rsync client access to the module. No public exploit code or CISA KEV listing is identified at time of analysis.

Authenticated path traversal in OpenList's batch rename API allows any user with rename permission to move files outside their authorized storage boundary. The `/api/fs/batch_rename` endpoint in `server/handles/fsbatch.go` validates `src_dir` and `new_name` against path traversal, but leaves `src_name` unchecked before concatenating it with the authorized path and passing the result to `fs.Rename`. A detailed proof-of-concept is embedded in the GHSA advisory; no CISA KEV listing exists, but the low privilege bar (any authenticated user with rename permission) makes cross-user file integrity loss and file-existence disclosure realistically exploitable in multi-tenant deployments. The issue is fixed in version 4.2.4.

Path traversal exploitation in the AI Hub WordPress theme (versions <= 1.3.10) enables any authenticated subscriber to download arbitrary files from the web server, including sensitive configuration files outside the WordPress document root. With a Changed Scope designation in the CVSS vector, the attacker's reach extends beyond the WordPress application to the underlying server filesystem, enabling theft of database credentials, private keys, and system configuration data. No public exploit code or active exploitation via CISA KEV has been identified at time of analysis, but the low privilege requirement - a subscriber account - significantly lowers the bar for abuse on sites with open user registration.

Unauthenticated arbitrary file download in OMGF Pro (versions 5.2.7 and earlier) allows any remote attacker to retrieve arbitrary files from the server filesystem without credentials, exposing sensitive data such as WordPress configuration files containing database credentials. The CVSS:3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) confirms trivial network-based exploitation with high confidentiality impact and zero authentication or user interaction required. No public exploit code or CISA KEV listing has been identified at time of analysis, but the Patchstack advisory lowers the barrier for threat actor discovery significantly.

Arbitrary file deletion in the Participants Database WordPress plugin (versions <= 2.7.8.4) allows remote unauthenticated attackers to delete files anywhere on the server filesystem by exploiting a path traversal flaw (CWE-22), subject to a user interaction requirement. The scope-changed CVSS vector (S:C/A:H) indicates that successful exploitation reaches beyond the plugin directory, threatening WordPress core files, server configuration, or other critical resources, with potential for complete site outage. No public exploit has been identified at time of analysis, and the vulnerability does not appear in the CISA KEV catalog.

Path traversal in the Do Lasso WordPress plugin (versions <= 358) allows authenticated subscribers to traverse the server file system beyond the intended directory scope, achieving high confidentiality, integrity, and availability impact. The vulnerability is exploitable by any authenticated WordPress user holding the subscriber role - the lowest privilege tier - over the network, making it accessible to any registered site user. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists, but the Patchstack advisory signals a patched version is available.

Unguarded git option forwarding in GitPython before 3.1.57 allows low-privileged attackers to inject unsafe options into two git subcommands via kwargs, achieving arbitrary file overwrite or arbitrary file read. Specifically, IndexFile.checkout() forwards caller-controlled kwargs to git checkout-index without invoking check_unsafe_options(), enabling the --prefix flag to write repository-tracked content to any path the process can write. TagReference.create() similarly exposes the -F/--file option of git tag, allowing arbitrary file contents to be read in-band. A working proof-of-concept is documented in the GHSA advisory. No active exploitation has been confirmed in CISA KEV at time of analysis.

Remote code execution in Flowise before 3.1.3 lets authenticated users escape the vm2 JavaScript sandbox and run arbitrary code on the host. By abusing a moment.js locale-validation weakness, an attacker supplies a forged String object whose match function defeats the path-traversal check, causing Flowise to load and execute an attacker-planted JavaScript file from the document store outside the sandbox. Reported by VulnCheck and fixed by the vendor; no public exploit or CISA KEV listing was identified at time of analysis, though the CVSS 4.0 base score of 9.0 reflects full compromise of confidentiality, integrity, and availability.

Arbitrary file read via path traversal in mcp-atlassian prior to 0.22.0 allows any authenticated MCP client to supply an absolute or traversal path to the confluence_upload_attachment tool, causing the server to open and exfiltrate the targeted file as a Confluence attachment. On Linux deployments, /proc/self/environ exposes live API credentials including CONFLUENCE_API_TOKEN, AWS keys, and database passwords, enabling full Atlassian account takeover and lateral movement. A confirmed prompt injection attack chain means threat actors who can write content an AI agent will read - such as a malicious Jira ticket - can trigger the same credential exfiltration with zero MCP credentials; publicly available exploit code and a demonstration video exist.

Symlink following in KubeVirt's virt-handler migration proxy enables a low-privileged Kubernetes user holding namespace edit and pods/exec permissions to achieve full node compromise by redirecting a migration Unix socket to the host CRI-O container runtime socket. Because virt-handler runs as root within the host mount namespace and resolves socket paths through /proc/<pid>/root/ using net.Dial() without symlink validation, an attacker-controlled symlink placed in a qemu-writable directory causes virt-handler to transparently proxy arbitrary bytes into the container runtime, yielding complete control over the underlying Kubernetes node. No public exploit has been identified at time of analysis, but the scope change from container to host and the full CIA triad impact make this a critical remediation priority for all OpenShift Virtualization 4 deployments.

Path traversal in rConfig's file download endpoint exposes arbitrary files readable by the web server process to authenticated users. Affected versions prior to 8.2.13 fail to sanitize the filename GET parameter in the download_export() method, allowing ../ sequences to escape the exports directory. An attacker with valid credentials can exfiltrate sensitive application files including .env files containing encryption keys, database credentials, and mail configuration. No public exploit code or KEV listing has been identified at time of analysis.

Zip slip path traversal in IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 allows a network-positioned attacker to write arbitrary files outside the intended extraction directory when a victim imports a maliciously crafted configuration archive. The CVSS vector (AV:N/AC:L/PR:N/UI:R) confirms the attack is network-deliverable with low complexity but requires the target user to actively import the crafted configuration - a social engineering dependency that is the primary limiting factor. No public exploit or CISA KEV listing has been identified at time of analysis; vendor patch is confirmed available.

Path traversal in Canonical LXD's image metadata template processing enables an authenticated low-privilege attacker to read arbitrary host files or create files in arbitrary host filesystem locations. The flaw resides in the virtual machine/QEMU driver execution path, where LXD fails to sanitize template file paths from escaping the designated instance templates directory. Exploitation crosses the container/VM boundary to the host (scope change, S:C), making this high-severity in environments where host isolation is a security assumption. No public exploit code or CISA KEV listing has been identified at time of analysis.

Path traversal in Canonical's LXD container and VM manager allows a user with backup import/restore privileges to write or read files outside the intended restore directory by embedding traversal sequences in the instance or storage-volume names stored in a crafted backup archive's metadata. Because LXD does not validate these names on import/restore, an attacker can corrupt or overwrite host files, potentially leading to full host compromise. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV; the very high CVSS (9.9) is driven by the scope-changing, high-integrity/availability impact on the host.

Credential disclosure in the Budibase low-code platform (versions prior to 3.40.1) lets an unauthenticated attacker steal a REST datasource's stored Bearer, Basic, or static-header secrets. Because RestIntegration._req in packages/server/src/integrations/rest.ts attaches getAuthHeaders and defaultHeaders before resolving the request host, a PUBLIC-role query invoked via POST /api/v2/queries/:queryId can be pointed at an attacker-controlled host - using an absolute URL or a {{ parameter }} in the path - and the API-masked (--secret-value--) credentials are delivered in cleartext. Publicly available exploit code exists (full PoC in the GHSA advisory); no public evidence of active exploitation. This is a bypass of the earlier GHSA-3gp5 fix, which closed the base-URL rewrite vector but added no same-origin check.

Path traversal (Zip Slip) in Joomla 6.1.1's com_joomlaupdate component enables persistent remote code execution when a Super User is socially engineered into extracting a crafted ZIP archive via the administrator interface. The extract.php extraction routine failed to validate ZIP entry filenames for parent-directory sequences (`..`), absolute Unix paths, Windows drive letter paths, or UNC paths - allowing an attacker-supplied archive to write arbitrary PHP files outside the intended extraction root. No confirmed active exploitation (not in CISA KEV); an upstream patch is available via GitHub commit and PR, though a tagged patched release version has not been independently confirmed.

Path traversal in IBM i 7.3 through 7.6 allows remote authenticated attackers to read sensitive files and write or manipulate files outside intended directory boundaries. The vulnerability is reachable over the network with only low-privilege credentials, making it accessible to a broad set of authenticated users in multi-tenant or shared IBM i environments. No active exploitation or public proof-of-concept has been identified at time of analysis, and IBM has released a patch via their support portal.

Path traversal in SSH.NET's ScpClient.Download() enables a malicious, compromised, or man-in-the-middle SCP server to write arbitrary files anywhere the client process has write access during recursive directory downloads. All SSH.NET NuGet package versions up to and including 2025.1.0 are affected; the vulnerability is analogous to CVE-2019-6111 in OpenSSH but extends to directory traversal. No public exploit code or CISA KEV listing has been identified at time of analysis, though the integrity impact is high given the file-write primitive can overwrite SSH authorized keys, shell rc files, or application binaries.

Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the intended Docker cache directory when specific remote-repository conditions are present. The CVSS 3.1 vector scores 5.3 Medium, reflecting a real but constrained integrity risk - arbitrary filesystem writes are possible, but high attack complexity and required authentication limit opportunistic abuse. No active exploitation or public exploit code has been identified at time of analysis.

Path traversal via unsanitized upstream ETag and Content-Type headers in Seerr's ImageProxy allows a malicious or compromised Jellyfin or Emby media server—or a network-positioned MITM attacker on a plaintext connection—to write arbitrary files outside the cache directory, overwriting critical application files such as /app/dist/index.js for deferred code execution as the Node.js process user. All Seerr releases prior to 3.4.0 are affected; the unauthenticated /avatarproxy/:jellyfinUserId endpoint is the attack surface and requires no credentials against Seerr itself. No public exploit has been identified at time of analysis, though the fix commit fully documents the vulnerable code path, making reconstruction straightforward.

Unauthenticated local PHP file inclusion in the SP Page Builder extension for Joomla (versions before 6.8.0) lets remote attackers force the application to include and execute arbitrary PHP files already present on the server. Because included PHP is executed in the application context, this path-traversal flaw can escalate to remote code execution, and the CVSS 4.0 score of 9.2 reflects full compromise of confidentiality, integrity, and availability. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.

Confused-deputy privilege escalation in snowflake.core (Snowflake Python API) prior to version 1.13.0 enables attackers with low-privileged access to a downstream application to perform unauthorized Snowflake operations under the application's higher-privileged session. Two related input-sanitization weaknesses make this possible: path traversal via unencoded `..` segments in REST URL paths (CWE-22), and HTTP parameter pollution via injected `&`, `#`, or `=` characters in query strings (CWE-141), either of which can subvert swap, clone, or rename operations against unintended resources. No public exploit code has been identified at time of analysis and no CISA KEV listing is confirmed; the vendor-released fix is snowflake.core 1.13.0, available on PyPI and requiring manual upgrade.

Path traversal in FreeCAD prior to version 1.1.2 allows arbitrary file write to any location accessible to the running user when a crafted .FCStd document is opened. The PropertyFileIncluded::Restore() function in src/App/PropertyFile.cpp processes the file and data attributes from Document.xml without sanitizing directory separators, parent traversal sequences, or absolute paths, meaning a malicious ZIP archive containing a matching FileIncluded XML attribute can direct writes outside the intended transient directory. No public exploit has been identified at time of analysis, but the fix is confirmed released in version 1.1.2 and the vulnerability is straightforward to weaponize given public patch disclosure.

Unauthenticated arbitrary file write in DB-GPT v0.8.1 lets remote attackers achieve remote code execution by smuggling directory-traversal sequences (../) through the user_id HTTP header of the Python file-upload endpoint. Because the header value is used unsanitized as a path component of the upload directory, an attacker can escape the intended python_uploads directory and drop attacker-controlled files into code-execution-sensitive locations such as Python startup hooks, cron directories, or agent scripts. Rated CVSS 4.0 9.3 (Critical); no public exploit identified at time of analysis, though a VulnCheck advisory and an upstream fix commit confirm the flaw.

Arbitrary file deletion in the GeoDirectory WordPress plugin (all versions through 2.8.169) permits authenticated attackers with subscriber-level access to delete any file the web server process can reach, trivially enabling remote code execution by targeting wp-config.php. The attack exploits a query-string consistency-check bypass in the delete_revision handler, which dereferences attacker-supplied attachment metadata paths without any post-type or filesystem-path validation. No public exploit code or CISA KEV listing was identified at time of analysis, though the description is sufficiently detailed to enable independent exploit development; any site with open user registration should treat this as an immediate priority.

Path traversal in electerm's RDP clipboard file transfer (prior to v3.15.120) lets a malicious RDP server write attacker-controlled files to arbitrary locations on the victim's filesystem. The `fileInfo.name` field from the RDP CLIPRDR protocol - fully controlled by the server - is passed unsanitized to `osResolve`, enabling `../` sequences to escape the user-selected save directory. No public exploit is identified at time of analysis; exploitation requires the victim to connect to a malicious RDP server and receive a clipboard file transfer.

Path traversal in electerm's recursive file transfer component allows a malicious FTP or SFTP server to write attacker-controlled content to arbitrary locations on the victim's filesystem, bypassing the user-selected download directory. The root cause is in `src/client/components/file-transfer/transfer.jsx` where server-supplied `file.name` and `folder.name` values are passed unsanitized to Node.js `resolve()`, permitting traversal sequences such as `../../` to escape the intended directory. No public exploit or CISA KEV listing exists at time of analysis, but SSVC rates the technical impact as total and the patch is confirmed in release v3.15.120.

Path traversal in electerm's SFTP client allows a malicious or man-in-the-middle SFTP server to write attacker-controlled file content to arbitrary locations on the connecting user's filesystem, bypassing the intended temporary directory confinement. All electerm releases prior to 3.15.120 are affected across all supported platforms (Linux, macOS, Windows). No public exploit code or CISA KEV listing exists at time of analysis, but the patch commit and GitHub security advisory are publicly visible, lowering the bar for independent reproduction. CVSS 8.1 reflects high integrity and availability impact gated by required user interaction with a malicious server.

Path traversal in XAgent's ToolServerNode workspace file endpoint allows any network-accessible user to read arbitrary files on the host by exploiting missing path containment validation in the `/workspace/file` handler. Because XAgent permits self-registration without email verification, an attacker requires no prior credentials - trivial account creation is sufficient to reach the vulnerable endpoint. Sensitive targets include application secrets, database credentials, and system configuration files that may be reachable through Docker volume mounts, with no public exploit identified at time of analysis but the fix commit publicly available.

Path traversal in Adobe Lightroom Classic versions up to 15.4.1 allows an attacker to read arbitrary files from the victim's local file system by supplying a crafted project or catalog file. The scope-changed CVSS vector (S:C) indicates the vulnerability breaks out of Lightroom's intended file-access sandbox, potentially exposing OS-level files and credentials accessible to the process. No public exploit code has been identified at time of analysis, and Adobe has released a patched version (15.5) via advisory APSB26-94.

Remote code execution in Microsoft PowerShell Core is achievable by unauthenticated network attackers exploiting a relative path traversal flaw (CWE-23), provided the victim performs some user interaction. The CVSS 8.8 score reflects high confidentiality, integrity, and availability impact with no privilege requirement on the attacker's side, making this a significant threat in enterprise environments where PowerShell Core is ubiquitous. No public exploit code or CISA KEV listing has been identified at time of analysis, but the Microsoft Security Response Center has published an advisory.

Local privilege escalation in Microsoft .NET Framework exploits a relative path traversal flaw (CWE-23), enabling an unprivileged local user to gain elevated system rights through user interaction. The vulnerability affects .NET Framework on Windows and is rated CVSS 7.8 (High), with full confidentiality, integrity, and availability impact upon successful exploitation. No public exploit code or CISA KEV listing has been identified at time of analysis.

Path-traversal-driven remote code execution affects the Microsoft Teams client for Android in all builds prior to 1.0.0.2026133602, where improper restriction of pathnames (CWE-22) lets an unauthorized attacker escape the app's restricted directory and execute code over the network. Microsoft rates it CVSS 9.8, but real-world signals are muted: EPSS is 0.62% (47th percentile), CISA SSVC records exploitation status as 'none', and there is no public exploit identified at time of analysis. A vendor patch is available, making prompt client updates the decisive control.

Path traversal in Adobe's Content Credentials toolkit - spanning the c2patool CLI, the c2pa Rust SDK, and the @contentauth/c2pa-web JavaScript/WASM SDK - enables arbitrary file-system reads outside intended directory boundaries on the local host. Affected versions include c2patool ≤ v0.27.5, c2pa-rs ≤ v0.90.5, and @contentauth/c2pa-web ≤ 0.12.0, with patched releases available for all three. No public exploit has been identified at time of analysis, but the scope-changed flag in the CVSS vector indicates that successful exploitation can reach resources beyond the vulnerable component's own security domain.

Path traversal (CWE-23) in Zoom VDI Client and Plugins exposes authenticated local users to information disclosure and potential file integrity impact by allowing directory escape via crafted path input. Affected are all tracked versions under cpe:2.3:a:zoom_communications:zoom_vdi. No public exploit code or CISA KEV listing exists at time of analysis, but the High confidentiality and integrity impact ratings warrant prompt patching in VDI environments where insider or post-compromise scenarios are relevant threats.

Path traversal in Sub2API versions 0.1.135-0.1.168 allows authenticated tenants to relay API requests to arbitrary upstream endpoints using operator-owned provider credentials (ChatGPT/Codex OAuth tokens, OpenAI platform keys, or operator-configured base URLs). The POST /responses/*subpath wildcard route accepted client-controlled subpaths and concatenated them into upstream URLs without sanitization, enabling scope-changing abuse of pooled shared accounts. No public exploit code has been identified at time of analysis, but the fix is publicly documented via GitHub advisory, PR diff, and release tag - including specific bypass path examples - substantially reducing reconstruction effort for any authenticated tenant.

Path traversal in Velociraptor's NewNotebook API allows authenticated users holding NOTEBOOK_EDIT permission to write files outside the organization's designated data store directory. While the written file is constrained to the '.json.db' extension, this is sufficient to overwrite critical internal metadata files - including ACL records and hunt configurations - causing data corruption that can undermine the integrity of active forensic investigations. No public exploit code or CISA KEV listing has been identified at time of analysis; exploitation requires a valid authenticated session with a specific permission grant.

Unauthenticated arbitrary file read in Siemens License Server (SLS) versions prior to V5.3 allows remote attackers to traverse the filesystem and access sensitive files without any credentials. The root cause is missing sanitization of user-supplied path input (CWE-35), and the CVSS 4.0 score of 8.7 reflects network-exploitable access with no authentication or user interaction required and high confidentiality impact. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the attack complexity is low and the attack surface is any network-reachable SLS instance.

Path traversal in n8n's Git node before versions 1.123.67, 2.31.5, and 2.32.1 allows authenticated low-privilege users to escape the repository sandbox during fetch, pull, and push-tags operations. By pointing an allowlisted remote configuration value at a local filesystem path outside the intended sandbox, an attacker with workflow create/execute rights can pull arbitrary local git repositories into the workspace and read their files and full commit history, including any secrets or credentials stored in git history. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, but the low complexity and low-privilege attack path make it a realistic insider or compromised-account threat in multi-user n8n deployments.

Unauthenticated remote directory listing in deepwiki-open through commit 16f35a0 allows any network-accessible attacker to enumerate arbitrary filesystem paths on the host by supplying absolute path parameters to the local-repository structure endpoint. The root cause is a combination of missing input path restriction (CWE-22) and an authentication layer that is disabled by default (WIKI_AUTH_MODE=false), meaning every default deployment is immediately vulnerable without any configuration change. No public exploit has been identified at time of analysis, but the zero-authentication, low-complexity attack surface makes this trivially exploitable against any internet-exposed instance.

Authenticated path traversal in Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus (versions below 4820) allows a low-privileged authenticated attacker to traverse outside intended directory boundaries within the Exchange Online backup module, resulting in high availability impact and limited integrity compromise across a changed scope. The vendor has released a patched build (4820) and published an advisory. No public exploit code or CISA KEV listing has been identified at time of analysis, but the low attack complexity and network accessibility make this a credible threat in environments running affected builds.

Remote code execution in Crafty Controller (crafty-4), a web-based management panel for Minecraft servers, arises from path traversal in the server-import and admin file-upload features that lets an authenticated user write files to arbitrary filesystem paths accessible to the application. By planting a file in an executable or auto-loaded location, a low-privileged authenticated attacker can escalate to code execution in the context of the Crafty Controller process. No public exploit has been identified at the time of analysis, and the issue is not listed in CISA KEV; EPSS data was not provided.

Path traversal in SAP Manufacturing Integration and Intelligence allows a highly privileged attacker to write files outside intended directory boundaries by supplying specially crafted input to affected file path validation functions. Exploitation requires a legitimate user to subsequently interact with the attacker-influenced content and depends on conditions outside the attacker's direct control, as reflected by the AC:H and UI:R CVSS metrics. Successful exploitation achieves a scope change affecting adjacent components with high impact on confidentiality, integrity, and availability. No public exploit code and no CISA KEV listing exist at time of analysis.

Path traversal in Tabby terminal emulator (prior to 1.0.235) on Windows allows a malicious SFTP server to write or overwrite arbitrary files outside the user-selected download or temporary edit directory. When a Windows user downloads a folder or opens a remote file for editing, server-supplied filenames containing backslash sequences bypass POSIX path handling in the SSH layer and are later resolved by Windows-native path.join(), enabling directory traversal. No public exploit code has been identified at time of analysis, but the attack requires only a user connecting to an attacker-controlled SFTP server and initiating a download or file-edit operation.

Path traversal in the Sucuri Security WordPress plugin through version 2.7.3 allows authenticated administrators to delete arbitrary files outside the WordPress installation directory. The pageIntegritySubmission() method in src/integrity.lib.php concatenates the unsanitized sucuriscan_integrity parameter directly with ABSPATH before passing it to PHP's unlink(), enabling traversal sequences to reach sensitive files such as wp-config.php and .htaccess. A publicly available exploit exists (reported by VulnCheck); no CISA KEV listing has been confirmed, but file deletion of wp-config.php can cause immediate site outage and enable full WordPress reinstallation by a follow-on attacker.

Path traversal in the unearth Python package discovery library through version 0.18.2 allows an attacker who controls or compromises a package source to write arbitrary files to any filesystem location accessible to the extracting process. The flaw resides in the is_within_directory function, which performs only a lexical path containment check without resolving symlinks or normalizing ../ sequences via os.path.realpath(), meaning maliciously crafted tar archive members silently bypass the extraction guard. A publicly available proof-of-concept exists at GitHub issue #180; the upstream fix was merged in commit 6c78164, but no confirmed active exploitation per CISA KEV has been reported.

Unauthenticated arbitrary file read in NCEAS Metacat (all 1.x and 2.x through 2.19.1) lets a remote attacker retrieve any file readable by the Tomcat process via a path-traversal in the archiveEntryName parameter of the legacy 1.x action=read endpoint. A single unauthenticated GET request can exfiltrate credentials, DataONE client certificates and private keys, and embargoed research data. Publicly available exploit code exists (POC demonstrated and verified); the issue is fixed only in Metacat 3.0.0, and 2.x will not be backported.

Arbitrary file write in OpenCart 4.2.0.0 lets an attacker plant a PHP web shell in the webroot by abusing the extension installer, which extracts uploaded .ocmod.zip archives without validating that extracted paths remain inside the target directory (a classic Zip-Slip / path traversal). Because a web shell grants command execution, this escalates to full remote code execution on the store server. There is no public exploit identified at time of analysis, EPSS is low (0.17%, 6th percentile), and it is not on CISA KEV.

Remote code execution in NASA fprime-gds through version 3.4.3 lets an unauthenticated remote attacker fully compromise the ground data system and inject arbitrary commands to any connected spacecraft. The Flask ground station exposes every endpoint without authentication (CWE-306), while a path traversal in the upload/download handler permits reading and writing arbitrary files, and a hardcoded Flask secret key (CWE-321) enables session forgery; chained, they yield code execution on the ground station host. No public exploit is identified at time of analysis, but the CVSS 9.8 rating and unauthenticated network vector make this a high-priority, real-world risk for anyone running F Prime ground software.

Path traversal in o1lab/xmysql (all versions) allows unauthenticated remote attackers to read and download arbitrary files from the host server via a crafted query parameter. The flaw exists in lib/xapi.js at lines 338 and 424, where the unsanitized req.query.name value is joined with the working directory and passed directly to res.download(), enabling ../ sequences to escape the application root. No patch has been released and all versions are confirmed affected, making every exposed instance immediately actionable for attackers with network access.

Path traversal in mustafaakin/cast-localvideo (all versions) exposes arbitrary server files to unauthenticated remote attackers with trivial effort. The Node.js HTTP handler in app.js at lines 151-153 passes the user-supplied `req.body.dir` parameter directly to `res.sendFile()` without any path sanitization, permitting `../` sequences or absolute paths to escape the intended directory. No patch has been identified at time of analysis, no public exploit has been confirmed, and the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector means any internet-facing deployment is trivially exploitable.

Arbitrary file deletion in the cube-root/directory-serve Node.js utility (all versions through 1.3.7) lets an unauthenticated remote attacker remove files anywhere on the host by supplying ../ sequences in the file query parameter of the file-remove middleware. Exploitation requires the server to be started with the --delete option, and the CVSS 3.1 score of 9.1 (I:H/A:H) reflects the potential for destruction of configuration, data, or system files. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the flaw is trivially reproducible from the disclosed source path.

Arbitrary file write and delete as root in AsyncFuncAI DeepWiki-Open (through commit 16f35a0) lets unauthenticated remote attackers corrupt, overwrite, or destroy any file the host process can touch. The api/api.py wiki-cache endpoint builds filesystem paths directly from user-supplied owner, repo, and repo_type values without sanitization, and a second unauthenticated directory-creation endpoint completes the primitive so an attacker can traverse out of the cache directory. With no authentication (PR:N) and root-level execution, this is a direct path to full host compromise; no public exploit identified at time of analysis and it is not listed in CISA KEV.

Local file inclusion in the Eventin WordPress plugin (all versions before 4.1.20) allows authenticated users holding editor-level or higher WordPress roles to supply an arbitrary local filesystem path as a template setting, causing the plugin to include and execute any reachable PHP file on the server. Full confidentiality, integrity, and availability impact is achievable on a successful exploitation. A publicly available proof-of-concept from WPScan exists, though the CVE carries no CISA KEV listing and an EPSS of only 0.16%, indicating no confirmed widespread active exploitation campaigns at time of analysis.

Path traversal in parisneo/lollms 2.1.0 exposes arbitrary server files to unauthenticated remote attackers via the SPA catch-all route in `backend/routers/ui.py`. URL-encoded dot-dot sequences (`%2e%2e`) bypass Starlette's built-in path normalization and are decoded by Python's `pathlib.resolve()`, allowing directory escape from the static file root with no privileges or user interaction required. No public exploit has been independently confirmed at time of analysis, though the public fix commit at GitHub fully documents the vulnerable code pattern and the bypass technique, substantially lowering the bar for exploit development.

Path traversal in Pathling Server's FHIR bulk export result endpoint (`/$result`) prior to version 2.0.0 allows any caller holding a valid async export job ID to read arbitrary files from the warehouse database root by supplying crafted `file` parameter values containing directory traversal sequences. Because the server validates the job ID but never normalizes or confines the requested file path to the job's designated `jobs/<jobId>` subdirectory, and because export scratch space cohabits the same filesystem root as persisted FHIR resource tables, an attacker can exfiltrate sensitive clinical health data. No public exploit has been identified at time of analysis, but the CVSS 4.0 score of 8.7 with a fully unauthenticated network vector makes this a high-priority patch for healthcare deployments with export operations enabled.

Path traversal in Pathling Server's FHIR async export `/$result` endpoint exposes arbitrary warehouse filesystem files to any caller who can supply a valid export job ID. All Pathling Server deployments prior to version 2.0.0 running without authentication and with async export enabled are affected, as the file handler accepts user-supplied path components without normalization or directory confinement. No public exploit code has been identified at time of analysis, but the technique is straightforward - the attacker need only initiate their own export job to obtain a valid job ID, then traverse out of the job directory to reach co-located FHIR resource tables, which may contain protected health information.

Arbitrary file read in Postiz (gitroomhq/postiz-app before 2.22.1) lets an unauthenticated remote attacker retrieve any file readable by the application process via the /api/uploads media route, which fails to confine URL-supplied path segments to the upload directory. Because URL-encoded traversal sequences survive Next.js route matching and are decoded only at the filesystem call, an attacker can read the process environment to steal the JWT signing secret, then forge a non-expiring administrator session without a password - turning a file-disclosure bug into full account takeover. There is publicly available fix code (vendor commit and v2.22.1 release), but no public exploit identified at time of analysis and the issue is not in CISA KEV.