By weakness (CWE)

CWE-22: related vulnerabilities

CVEs classified under CWE-22. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

291 published vulnerabilities · page 3 of 3

• CVE-2026-13748MEDIUM 6.3

  Snowflake CLI versions before 3.19 contain a path traversal flaw that allows attackers to read arbitrary files from the local system. If an attacker can trick a user into processing malicious project or repository content, the CLI will read files outside the intended project directory and send their contents to Snowflake services. The attacker would then need to access the victim's Snowflake account—such as through query history or uploaded files—to retrieve the exfiltrated data. This requires user interaction and depends on the attacker having follow-on access to the Snowflake environment.

• CVE-2026-15138MEDIUM 6.3

  A path traversal vulnerability exists in tumf's mcp-text-editor software (versions up to 1.0.2) that allows an attacker to access files outside the intended directory through manipulation of file path parameters. The vulnerability requires user interaction to exploit but can be triggered remotely. Public disclosure has already occurred, increasing the likelihood of active exploitation attempts.

• CVE-2026-44171MEDIUM 6.3

  MariaDB's mbstream backup utility contains a path traversal vulnerability that could allow an attacker to write files outside the intended backup directory when unpacking a specially crafted archive. The flaw affects multiple MariaDB versions across the 10.6, 10.11, 11.4, 11.8, and 12.3 release branches. An attacker would need local access and elevated privileges to exploit this, but successful exploitation could result in arbitrary file creation on the system, potentially compromising system integrity or enabling privilege escalation.

• CVE-2026-55668MEDIUM 6.3

  File Browser is a web-based file management application. Versions before 2.63.16 contain a flaw in how they validate symbolic links (symlinks) during file creation. When a user with file creation and modification permissions attempts to create a file via a dangling symlink—one pointing to a non-existent target—the application checks whether the symlink's nearest existing parent directory is within the user's allowed scope. If it passes that check, the application follows the symlink and creates the file at the symlink's target location, which may lie outside the user's intended scope. An authenticated attacker can exploit this to write files to directories they should not have access to.

• CVE-2022-50953MEDIUM 6.2

  The admin-word-count-column WordPress plugin version 2.2 contains a flaw that lets unauthenticated attackers read files they shouldn't be able to access. An attacker can craft a specially formed web request to the plugin's download-csv.php file, using directory-traversal tricks and null-byte injection to bypass the plugin's file-access controls. This allows them to download sensitive configuration files and other data directly from the server.

• CVE-2026-0055MEDIUM 6.2

  A path traversal vulnerability in Android's PackageInstallerService allows an attacker to write a Device Policy Controller (DPC) application to an unintended directory. By exploiting this flaw, an unprivileged local process can escalate its privileges without requiring user interaction or additional system permissions. The vulnerability affects multiple Android versions and could allow an attacker with local access to gain elevated capabilities on the device.

• CVE-2026-39245MEDIUM 6.2

  The decompress package before version 4.2.2 contains a path validation flaw that allows attackers to write files outside the intended extraction directory. When decompressing archives, the library checks whether extracted files stay within a safe folder, but the check uses a string-matching approach that can be bypassed. For example, a path like '/tmp/app_config' would incorrectly pass validation for the directory '/tmp/app' because the string '/tmp/app' appears at the start of it—even though they are different directories. An attacker can exploit this to place malicious files in adjacent directories, potentially compromising the application or system.

• CVE-2026-12479MEDIUM 6.1

  A flaw in Keras 3.14.0's model saving and loading functionality allows an attacker to use specially crafted layer names to write files or create directories outside the intended temporary working directory. While the code blocks forward slashes in layer names, it doesn't sanitize directory traversal sequences like `..`, enabling path escape. An attacker must trick a user into saving or loading a malicious model file for exploitation to occur.

• CVE-2026-53766MEDIUM 6.1

  Chrome DevTools for agents (chrome-devtools-mcp) contains a path validation flaw that allows an attacker with local access to bypass workspace boundary restrictions. By placing symbolic links inside an authorized workspace directory that point to files outside that boundary, an attacker can read sensitive files or overwrite files they should not have access to. This circumvents the security controls meant to confine agent operations to specific directories. The vulnerability affects versions 0.24.0 through 1.0.x and is resolved in version 1.1.0.

• CVE-2026-59946MEDIUM 6.1

  Composer, the PHP dependency manager, has a path traversal vulnerability in how it handles binary entry points during package installation. When a package specifies a bin entry with path segments like (..), Composer can be tricked into modifying files outside the package directory, changing their permissions to world-readable and world-executable. This happens automatically during composer install, update, or require commands. An attacker could craft a malicious package to expose sensitive files or make system binaries world-writable, creating a foothold for privilege escalation or information disclosure on affected systems.

• CVE-2026-41843MEDIUM 5.9

  Spring Framework applications that serve static resources through MVC or WebFlux are vulnerable to path traversal attacks. An attacker can craft malicious requests to access files outside the intended static resource directory, potentially reading sensitive configuration files, source code, or other protected assets. This vulnerability affects multiple recent versions of Spring Framework across all actively maintained branches.

• CVE-2026-54286MEDIUM 5.9

  Hono, a JavaScript web framework, contains a path traversal vulnerability on Windows systems that allows attackers to bypass file access restrictions. When a request contains an encoded backslash (%5C), Windows path resolution converts it to a literal backslash character, which Windows treats as a path separator. This causes Hono's static file serving functionality to interpret a single URL segment as a nested file path, potentially exposing protected files. An attacker can craft requests to read static files that should be restricted by middleware-based access controls. The vulnerability requires specific conditions—Windows hosting and unprotected static file serving—but poses a confidentiality risk. Hono 4.12.25 and later patch this issue.

• CVE-2026-54590MEDIUM 5.9

  AsyncSSH, a Python library for SSH protocol implementation, contains a path traversal vulnerability in version 2.23.0 that allows attackers to read SSH authorized keys files from outside their intended directory. The vulnerability exists because the code blocks certain path traversal characters (/, comma, and double dots) before substitution, but fails to block tilde (~) and environment variable syntax (${ENV}), which are expanded later in the process. This allows an attacker with network access to potentially retrieve sensitive key data by crafting specially formatted authorized keys file paths. The issue has been patched in version 2.23.1.

• CVE-2026-58015MEDIUM 5.9

  A security flaw in GLib's D-Bus SASL authentication allows a malicious D-Bus server to trick a client into reading arbitrary files from the system. During the DBUS_COOKIE_SHA1 authentication handshake, the server sends a cookie context parameter that the client does not properly validate. An attacker can embed path traversal sequences in this parameter to force the client to read sensitive files and leak their contents by comparing file data against cryptographic hashes. The attack requires network access and some guessing, but succeeds without user interaction.

• CVE-2026-59924MEDIUM 5.9

  Mistune, a popular Python Markdown parser, contains a path traversal vulnerability in its Include.parse() function. When processing markdown files that reference external files via include statements, the parser fails to properly validate that included file paths remain within the intended markdown directory. An attacker can craft specially designed include paths to escape the intended directory and read arbitrary files from the system. The vulnerability affects Mistune versions prior to 3.3.0 and is resolved in version 3.3.0 and later.

• CVE-2026-54250MEDIUM 5.8

  K3s, a lightweight Kubernetes distribution, contains a path traversal vulnerability in how it handles compressed etcd snapshots. When an administrator restores a backup, a maliciously crafted zip file can write files to unintended locations on the filesystem. An attacker would need to supply a malicious snapshot file and have an administrator decompress it, but the impact could include overwriting system files or creating files in sensitive directories. This has been patched in versions 1.35.3+k3s1, 1.34.6+k3s1, and v1.33.10+k3s1.

• CVE-2026-61432MEDIUM 5.7

  PraisonAI versions before 1.6.78 contain a path traversal weakness in their FastContext feature. When the system executes file-related tools like file reading or directory listing, it does not properly validate absolute file paths or path sequences that use '../' to step backward through directories. This means an attacker with access to the application could craft requests or manipulate the AI model to read files outside the intended workspace directory, potentially exposing sensitive data stored on the server.

• CVE-2025-24268MEDIUM 5.5

  CVE-2025-24268 is a medium-severity vulnerability in macOS that stems from inadequate validation of directory paths during parsing. An attacker with local access and user-level privileges could potentially exploit this weakness to read sensitive user data on an affected system. Apple has resolved this issue in macOS Sequoia 15.4 by implementing stricter path validation controls.

• CVE-2026-34657MEDIUM 5.5

  CAI Content Credentials, a library used to manage and verify digital content authenticity, contains a path traversal flaw in versions [email protected], c2pa-v0.80.1 and earlier. The vulnerability allows an attacker to write files to arbitrary locations on a system by crafting a malicious archive that, when extracted by a user, exploits insufficient pathname validation. This is a local attack requiring user interaction—an end user must actively extract or open the malicious file for the attack to succeed.

• CVE-2026-44022MEDIUM 5.5

  Docling, a document processing library, contains a path traversal vulnerability in how it handles LaTeX file inclusion commands. An attacker can craft a malicious LaTeX document that, when processed by Docling, reads arbitrary files from the system and includes them in the converted output. This affects versions 2.73.0 through 2.90.x. The vulnerability requires user interaction—someone must process the attacker-supplied LaTeX document—but once triggered, the attacker gains read access to any file the Docling process can access, potentially exposing credentials, configuration data, or other sensitive information.

• CVE-2026-44885MEDIUM 5.5

  Portainer Community Edition versions 2.33.0 through 2.33.7 contain a directory traversal flaw in the backup restore function. When administrators upload a .tar.gz backup file to restore Portainer's configuration, the extraction process fails to properly validate file paths. A malicious backup archive can exploit this to write files outside the intended directory, potentially placing them anywhere on the server filesystem—for instance, in cron job directories or other sensitive locations. An attacker with high-level privileges (such as admin access) can craft a backup to inject malicious files into the host system during restoration. The vulnerability is resolved in version 2.33.8.

• CVE-2026-49219MEDIUM 5.5

  ImageMagick, widely used for image processing and manipulation, contains a vulnerability that allows a local attacker with login privileges to bypass security policies and read files that should be restricted. The flaw stems from improper handling of filenames, specifically when symlinks are involved. An attacker could exploit this to circumvent the policy restrictions ImageMagick enforces. This is not a remote vulnerability—it requires local system access and user-level permissions.

• CVE-2026-49406MEDIUM 5.5

  Deno, a modern JavaScript and TypeScript runtime, has a path traversal vulnerability in its module resolver when operating in BYONM (Bring Your Own Node Modules) mode. A malicious package can craft a package.json file with directory traversal sequences (..) in its main field, causing Deno to load files from arbitrary locations on disk rather than from within the package's intended directory. Critically, this circumvents Deno's permission system—files that would normally be blocked by --allow-read restrictions can be read anyway if accessed through a require() call. The issue affects Deno versions prior to 2.7.12 and is resolved in that release.

• CVE-2026-54557MEDIUM 5.5

  mise is a popular tool for managing development dependencies like Node.js, Python, CMake, and Terraform across projects. A vulnerability in versions before 2026.6.1 allows an attacker to abuse the HTTP backend's symlink creation logic to place executable files or symlinks outside the intended mise installation directory. By crafting a malicious .tool-versions file in a repository, an attacker can trick mise into creating symlinks at arbitrary filesystem locations. If an attacker places a symlink in a directory that appears in a developer's PATH environment variable before legitimate tools, this could lead to execution of attacker-controlled code when developers run common commands.

• CVE-2026-55439MEDIUM 5.5

  Halo, an open-source website building tool, contains a path traversal vulnerability in its backup download feature that allows authenticated administrators to read files outside the intended backup directory. An administrator can craft requests to the backup download endpoint to access arbitrary files on the server by manipulating file paths. Additionally, the backup creation endpoint fails to sanitize status fields, which could enable data manipulation. The vulnerability affects versions prior to 2.24.3 and requires administrator-level access to exploit.

• CVE-2026-61431MEDIUM 5.5

  PraisonAI versions before 4.6.78 contain a path traversal vulnerability in its context-gathering feature. When processing configuration files (.praisoncontext and .praisoninclude), the application does not properly validate file paths, allowing attackers to read sensitive files outside the intended workspace directory. An attacker who can influence these configuration files can trick the system into including arbitrary file contents in the generated context bundle, potentially exposing credentials, source code, or other sensitive data stored on the same system.

• CVE-2026-8643MEDIUM 5.5

  pip, the Python package installer, has a path traversal vulnerability that can cause entry point scripts to be installed in unintended locations outside the target installation directory. When a package specifies console or GUI scripts without proper path sanitization, an attacker could craft a malicious package that installs executable scripts to arbitrary filesystem locations—potentially system directories or locations with higher privilege—allowing code execution with the privileges of the installing user.

• CVE-2026-10213MEDIUM 5.4

  AstrBot version 4.23.6 contains a path traversal vulnerability in its API endpoint that handles skill deletion. An authenticated attacker can manipulate the Name parameter to traverse the file system and read or modify files outside the intended directory structure. The vulnerability is network-accessible and does not require user interaction beyond the attacker having valid credentials. Public exploit code is available, increasing the risk of active exploitation.

• CVE-2026-10601MEDIUM 5.4

  A vulnerability in Grafana's Tempo and Loki data source plugins allows users with basic Viewer permissions to bypass intended access controls and reach backend endpoints they shouldn't be able to access. By crafting specially designed requests, an authenticated attacker can potentially steal database credentials, extract sensitive internal information, or execute administrative commands on the connected backend system. While the attack requires valid user credentials, the low barrier to entry (Viewer level is a basic permission tier) and the potential exposure of sensitive infrastructure credentials make this a meaningful risk for most organizations.

• CVE-2026-11467MEDIUM 5.4

  A path traversal vulnerability exists in jishenghua jshERP versions up to 3.6. An authenticated attacker can manipulate the fileName parameter in the addAccountHeadAndDetail endpoint to write or access files outside the intended directory. Because the vulnerability requires valid credentials to exploit, the immediate risk is constrained to insider threats or compromised accounts. However, the public disclosure of the issue increases the likelihood of exploitation attempts.

• CVE-2026-13426MEDIUM 5.4

  Mattermost's Go module contains a path traversal vulnerability in API route construction that allows authenticated attackers to redirect API calls to unintended endpoints. An attacker with valid credentials can craft malicious IDs containing path traversal sequences to bypass intended routing logic, potentially accessing or modifying data they shouldn't have access to. The vulnerability affects versions of the mattermost/server/public module prior to v0.1.22.

• CVE-2026-14636MEDIUM 5.4

  A path traversal vulnerability exists in the Ecommerce-CodeIgniter-Bootstrap project's vendor image upload feature. When authenticated users upload images through the Vendor Image Manager, an attacker can manipulate the folder parameter to access or write files outside the intended upload directory. The flaw is remotely exploitable by any logged-in user and requires no special interaction. This is a medium-severity issue affecting file integrity and confidentiality for systems using the vulnerable codebase.

• CVE-2026-15331MEDIUM 5.4

  CowAgent, a framework used for building AI agent skills, contains a path traversal vulnerability in its Skill Installation Handler. An authenticated attacker can manipulate the 'Name' parameter during skill installation to write files to unintended locations on the system, potentially corrupting data or disrupting service availability. The vulnerability affects versions up to 2.1.0 and is resolved in version 2.1.2.

• CVE-2026-29509MEDIUM 5.4

  Patool, a popular archive extraction utility, contains a flaw in how it validates whether extracted files stay within their intended directory. An attacker can craft a malicious archive with specially named files that trick the validation check and write files anywhere on the system. The vulnerability only affects systems running Python versions before 3.12. While the immediate impact is limited by the need for user interaction (the user must extract the archive), this is a classic arbitrary file write scenario that could lead to code execution or system compromise depending on file placement and permissions.

• CVE-2026-41972MEDIUM 5.4

  CVE-2026-41972 is a path traversal vulnerability in an SMS application that could allow an attacker to manipulate file paths and disrupt service availability. The vulnerability requires user interaction (such as clicking a malicious link) but does not require authentication, making it accessible to remote attackers. While the flaw does not compromise confidentiality or enable data theft, it can degrade or interrupt the SMS app's normal operation.

• CVE-2026-12565MEDIUM 5.3

  CVE-2026-12565 is a path traversal vulnerability in an unarchive module that fails to validate where extracted files are written. When processing malicious archive files on older systems running GNU tar (versions before 1.34, common in Ubuntu 20.04, Debian Buster, CentOS 7, and many Docker images), an attacker can craft an archive that extracts files outside the intended directory. This allows writing to arbitrary locations on the filesystem, potentially overwriting critical application or system files. Unlike the prior CVE-2025-10284 which addressed git-specific attack vectors, this vulnerability affects the core archive extraction logic and remains unfixed.

• CVE-2026-13503MEDIUM 5.3

  ANTLR4, a widely-used parser generator framework, contains a path traversal vulnerability in how it handles grammar vocabulary imports. An attacker can craft a malicious grammar file that, when processed by the vulnerable tokenVocab handler, reads files outside the intended directory. The flaw requires no authentication and can be exploited remotely by providing a specially constructed grammar option. While the direct impact is limited to information disclosure (reading files the attacker shouldn't access), the vulnerability is now publicly known and actively exploitable.

• CVE-2026-14500MEDIUM 5.3

  The Bulk Order Update for WooCommerce plugin contains a flaw that allows unauthenticated attackers to read the first line of files stored on affected WordPress servers. The vulnerability exists because an administrative function that processes CSV file uploads accepts user-supplied file paths without proper validation, and doesn't require authentication or verification of the user's identity. This creates two distinct risks: attackers can extract sensitive information (like system configuration files), and they can probe which files exist on the server without triggering alarms.

• CVE-2026-14628MEDIUM 5.3

  NousResearch's hermes-agent contains a path traversal vulnerability in its Live Webhook Endpoint that allows remote attackers to manipulate file paths without authentication. By crafting specific requests to the extract_media function, an attacker can read sensitive files from the server, potentially exposing configuration data, credentials, or other confidential information. The vulnerability affects versions up to 2026.5.16, and exploit code is publicly available.

• CVE-2026-15204MEDIUM 5.3

  A path traversal vulnerability exists in TOTOLINK X5000R routers that allows an unauthenticated remote attacker to access files outside the intended directory structure through the OpenVPN export feature. An attacker can craft requests to the vulnerable CGI endpoint to read sensitive files on the device, potentially exposing configuration data, credentials, or other confidential information stored on the router.

• CVE-2026-28705MEDIUM 5.3

  Gitea, a popular self-hosted Git service, contains a path traversal vulnerability in how it handles release asset exports. When Gitea dumps release assets, it uses the release tag name and asset file name directly as path components without proper sanitization. An attacker can craft specially named release tags or assets to manipulate where files are written on the server's filesystem, potentially writing outside the intended directory. This could allow unauthorized information disclosure if sensitive files become readable, though the vulnerability does not grant write or delete capabilities to arbitrary locations.

• CVE-2026-36726MEDIUM 5.3

  Bookcars v8.3 contains a vulnerability that allows attackers to delete files from a server without authentication. The flaw exists in an API endpoint designed to remove temporary license files, but it doesn't properly validate file paths. An attacker can exploit this by injecting directory traversal sequences (like '../') into the request to delete files outside the intended temporary directory, potentially removing critical application or system files.

• CVE-2026-39899MEDIUM 5.3

  Cacti, a widely-used open source monitoring framework, contains a path traversal vulnerability in its package import functionality. An attacker can exploit a filename parameter in package_import.php to access files outside the intended directory, potentially reading sensitive configuration files or other protected data. The vulnerability requires no authentication and can be triggered remotely, but the confidentiality impact is limited. Cacti versions 1.2.30 and earlier are affected; upgrading to 1.2.31 or later resolves the issue.

• CVE-2026-46337MEDIUM 5.3

  WWBN AVideo, an open-source video platform, contains a path-traversal vulnerability in version 29.0 and earlier that allows anyone on the internet to download image files from the server without logging in. An attacker can bypass the application's permission controls to access private user profile photos, admin-uploaded thumbnails, encrypted-video poster frames, and files in neighboring directories. The vulnerability exists because the affected endpoint does not validate or restrict file paths before serving images.

• CVE-2026-49342MEDIUM 5.3

  YARD, a popular documentation generator for Ruby, contains a path traversal vulnerability that allows attackers to read HTML files outside the intended documentation directory. The flaw occurs because the application checks its static file cache before properly cleaning up request paths, enabling specially crafted URLs to escape the configured document root and access sibling files. This affects versions prior to 0.9.44 and is fixed in that release.

• CVE-2026-57079MEDIUM 5.3

  Net::BitTorrent, a Perl BitTorrent client library, contains a path traversal vulnerability that allows remote attackers to write files outside the intended download directory. When a peer sends specially crafted metadata—either through magnet links or the BEP09 ut_metadata extension—an attacker can embed directory traversal sequences (".." path components) that the library fails to sanitize. This allows writing malicious files to arbitrary locations on the victim's system with the privileges of the downloading user. The attacker controls both the file content and its destination path, making this a serious integrity risk for systems running vulnerable versions.

• CVE-2026-58203MEDIUM 5.3

  pydantic-settings is a Python library that manages application configuration through Pydantic models. Versions 2.12.0 through 2.14.1 contain a flaw in how they handle secret files stored in a designated secrets directory. When the nested subdirectory feature is enabled, the library will follow symbolic links (shortcuts) that point outside the intended secrets directory, allowing it to read arbitrary files from the system. An attacker with write access to the secrets directory—such as in a shared or world-writable mount—can create malicious symbolic links to trick the application into loading sensitive files from anywhere on the system. This also bypasses the documented size limit protection meant to prevent loading oversized files.

• CVE-2026-55443MEDIUM 5.1

  LangChain versions prior to 1.3.9 contain a path-traversal vulnerability that allows unauthorized file access. Several components that load or search files do not properly restrict access to a configured directory boundary. An attacker who can influence file paths, search patterns, or LLM inputs could read files outside the intended scope—for instance, by using glob patterns, symbolic links, or prefix-matching tricks to escape a restricted directory and access sensitive files elsewhere on the system.

• CVE-2026-59152MEDIUM 5.0

  The LangSmith Client SDKs contain a vulnerability in their TracingMiddleware component that allows an attacker to read arbitrary files from a server and secretly upload them to LangSmith. An attacker with read access to a LangSmith workspace—such as a low-privilege team member, contractor, or compromised account—can exploit this to access files on any server running the vulnerable middleware, even without direct server access. This breaks the intended security boundary by granting file-read capabilities beyond what workspace permissions should allow. The vulnerability affects all LangSmith SDK versions before 0.8.18.

• CVE-2026-11844MEDIUM 4.9

  CVE-2026-11844 is a path traversal vulnerability in IEI Integration Corp's iVEC-IEI Virtualization Edge Computer that allows an authenticated attacker with elevated privileges to read arbitrary files outside the device's intended directory structure. An attacker with high-level access to the device could potentially access sensitive configuration files, credentials, or other protected data by manipulating file path requests. This is not a vulnerability an unauthenticated external attacker can exploit—it requires someone with administrative or privileged credentials already on the system.

• CVE-2026-12089MEDIUM 4.9

  The LWS Optimize WordPress plugin contains a path traversal vulnerability that allows authenticated users with Editor-level permissions or higher to read files from the server's filesystem. The plugin's CSS optimization feature trusts stylesheet URLs embedded in HTML without properly validating that resolved file paths stay within WordPress's directory boundaries. An attacker with sufficient WordPress account privileges could exploit this to access sensitive configuration files, database credentials, or other non-public data stored on the server.

• CVE-2026-41412MEDIUM 4.9

  alf.io is an open-source ticketing platform used by conferences and events to manage reservations. The vulnerability lies in how alf.io sandboxes custom extensions (plugins) that users can write to extend functionality. The sandbox was designed to safely run untrusted extension code, but it failed to protect file access. Specifically, extensions have access to an HTTP client tool that includes a method for uploading files. This method does not validate or restrict which files can be read—a malicious extension can read any file that the alf.io application has permission to access on the server, then send that file's contents to an attacker's server. An attacker would need to either write a malicious extension or trick an administrator into installing one, but once active, the extension can quietly exfiltrate sensitive data like configuration files, database credentials, or user records.

• CVE-2026-45731MEDIUM 4.9

  WWBN AVideo, an open-source video hosting platform, contains a file-read vulnerability in its database migration feature. An authenticated administrator can manipulate the migration process to read sensitive text files from the server's filesystem. This requires existing admin access, so it poses a targeted insider risk rather than a mass-exploitation threat, but it can expose configuration files, credentials, or other data to a compromised or malicious admin account.

• CVE-2026-7547MEDIUM 4.9

  The Woosa – Marktplaats for WooCommerce plugin contains a path traversal vulnerability that allows authenticated site administrators to read sensitive files from the server, such as the WordPress configuration file. An attacker with admin credentials can manipulate a file parameter to escape the plugin's intended log directory and access arbitrary files, potentially exposing database credentials and other secrets stored in wp-config.php.

• CVE-2026-7565MEDIUM 4.9

  The LearnPress – Backup & Migration Tool plugin for WordPress contains a flaw that allows site administrators to read files from anywhere on the server by manipulating a parameter called 'import-user-file'. While this requires admin-level access to exploit, the impact is serious: attackers with those credentials could retrieve sensitive configuration files, database credentials, or other confidential data stored on the server.

• CVE-2026-9083MEDIUM 4.9

  Keycloak realm administrators with "manage-realm" permissions can craft specially designed filesystem paths when setting up key provider components, allowing them to determine which files exist and can be read by the Keycloak service. This reconnaissance capability enables attackers to map the system's file structure and identify sensitive files before attempting further compromise.

• CVE-2026-9197MEDIUM 4.9

  Smart Slider 3, a popular WordPress plugin, contains a directory traversal vulnerability affecting all versions up to 3.5.1.36. An authenticated WordPress administrator can exploit the replaceHTMLImage function to read sensitive files from the server, including configuration files, database credentials, and other confidential data. The attack requires administrator-level privileges and direct knowledge of the server's file paths, but poses a meaningful risk in environments where admin access is delegated or compromised.

• CVE-2026-52756MEDIUM 4.8

  Ghidra, the NSA's reverse-engineering framework, contains a path traversal flaw in its IsfServer network component. An unauthenticated attacker can connect to the default listening port and craft specially formatted messages to probe and enumerate files on the system running Ghidra. The vulnerability allows limited information disclosure and potential denial of service, but does not enable code execution or file modification.

• CVE-2026-52902MEDIUM 4.7

  CVE-2026-52902 is a path traversal flaw in awxkit, the command-line interface for Red Hat's AWX automation platform. When a user imports a specially crafted YAML configuration file using the "awx --conf.format yaml import" command, an attacker can trick awxkit into reading arbitrary YAML files from the victim's local system. The vulnerability stems from insufficient validation of file paths in the YAML !include directive. This is fundamentally a client-side attack requiring the user to knowingly or unknowingly process a malicious YAML file, making social engineering a prerequisite for exploitation.

• CVE-2026-33462MEDIUM 4.6

  A path traversal flaw in Kibana's dashboard management allows an authenticated user with basic permissions to craft a malicious dashboard identifier. When an administrator deletes this dashboard, the deletion request bypasses security controls and targets unintended internal endpoints—potentially destroying user accounts or other critical resources. The vulnerability requires an administrator to take action on the malicious object, making it a privilege-escalation path rather than a self-executing exploit.

• CVE-2025-62851MEDIUM 4.4

  CVE-2025-62851 is a path traversal vulnerability affecting QNAP License Center that allows a local administrator to read files and system data they should not have access to. An attacker who already has administrative credentials can use this flaw to navigate the file system and extract sensitive information. The vulnerability has a CVSS score of 4.4 (Medium severity) and is addressed in License Center version 1.9.56 and later.

• CVE-2026-11411MEDIUM 4.4

  A path traversal vulnerability exists in the iAI Lab PDF AI App version 4.21.0 for Android. The flaw is located in the chatpdf.pro component's getExternalCacheDir function, where improper handling of the _display_name parameter allows an attacker with local device access to manipulate file paths. This could enable unauthorized file access or modification on the affected device. Public exploit code is available, increasing the practical risk of exploitation.

• CVE-2026-2500MEDIUM 4.4

  The Quick Playground plugin for WordPress has a path traversal flaw that allows WordPress administrators to read sensitive files from the server. An authenticated admin could retrieve files like wp-config.php or /etc/passwd without proper authorization. The vulnerability only affects sites synchronized with WordPress Playground or running on playground.wordpress.net, which significantly constrains real-world exposure. All versions up to and including 1.3.4 are affected.

• CVE-2026-45279MEDIUM 4.4

  Nextcloud Server contains a path traversal vulnerability that allows non-admin users to copy files into their own Nextcloud directories in certain scenarios. The vulnerability exists in specific versions and depends on underlying Unix file system permissions. An attacker would need already-elevated user privileges within Nextcloud to exploit this issue, limiting the practical threat surface.

• CVE-2026-5051MEDIUM 4.4

  HashiCorp Vault and Vault Enterprise versions prior to 2.0.1 contain a flaw in how they validate audit device configurations when using the legacy file audit path feature. The vulnerability stems from inconsistent application of plugin directory protections, which could allow a high-privileged attacker to read sensitive information from the system. This is not an active exploitation target in the wild, but requires administrative-level access to trigger.

• CVE-2026-57966MEDIUM 4.4

  A path traversal flaw in spice-vdagent allows a malicious or compromised SPICE host to write arbitrary files anywhere on a guest system. When a SPICE host initiates a file transfer, the agent doesn't validate the filename, enabling an attacker to place files in sensitive directories with the privileges of the logged-in user. This is a real but constrained risk: it requires either control of or a compromise of the SPICE host itself, not just network access.

• CVE-2024-47273MEDIUM 4.3

  Synology Hyper Backup versions before 4.1.2-4036 contain a path traversal vulnerability in the Backup Task feature that allows an authenticated user to write files outside their intended directory. An attacker with valid credentials could exploit this to place files in restricted locations on the system, potentially compromising system integrity or enabling lateral movement.

• CVE-2026-11595MEDIUM 4.3

  IBM WebSphere Application Server versions 9.0 and 8.5 contain a vulnerability in their administrative console's help system that could leak sensitive information to an attacker on the same network. The attacker needs network-adjacent access but no credentials or user interaction to exploit it. While the information disclosure is limited in scope, the flaw affects widely-deployed enterprise application servers and warrants timely patching.

• CVE-2026-11847MEDIUM 4.3

  CVE-2026-11847 is a path traversal vulnerability in IEI Integration Corp's iVEC-IEI Virtualization Edge Computer. An authenticated attacker can bypass intended directory restrictions and create folders in arbitrary system locations, potentially disrupting system organization, overwriting critical paths, or laying groundwork for privilege escalation attacks. The vulnerability requires valid credentials to exploit but poses real operational risk in multi-tenant or untrusted-user environments.

• CVE-2026-14783MEDIUM 4.3

  NousResearch's hermes-agent version 2026.5.29.2 contains a path traversal vulnerability in its skills tool. An authenticated attacker can manipulate the 'Name' argument to the skill_view function, allowing them to read files outside the intended directory. The vulnerability requires valid credentials but can be exploited remotely. A patch is available and should be applied promptly.

• CVE-2026-48789MEDIUM 4.3

  AnythingLLM versions prior to 1.13.0 contain a path traversal vulnerability on Windows systems that allows authenticated users to list and potentially access documents outside the intended documents directory. The vulnerability stems from incomplete validation of Windows-style directory paths. An attacker with valid credentials could craft specially encoded paths to escape the documents folder sandbox and view file listings in other locations on the Windows system.

• CVE-2026-54014MEDIUM 4.3

  Open WebUI, a self-hosted AI platform designed for offline operation, contains a path traversal flaw that allows authenticated users to read files outside the intended cache directory. The vulnerability stems from an incomplete validation check in the file serving logic that fails to properly isolate the cache folder from similarly-named sibling directories. An attacker with valid credentials can exploit directory name confusion to access restricted files. The issue has been patched in version 0.9.6.

• CVE-2026-48776MEDIUM 4.2

  A path traversal vulnerability in LangGraph Python SDK versions 0.3.14 and earlier allows authenticated users to manipulate resource identifiers in HTTP requests, potentially accessing or modifying resources they shouldn't have permission to reach. The vulnerability stems from unsafe construction of URL paths using caller-supplied identifiers without proper sanitization. An attacker with valid credentials could craft specially formatted identifier values containing URL path characters to bypass authorization checks, particularly in deployments where access control relies on URL-prefix validation rather than application-level authorization.

• CVE-2026-54319MEDIUM 4.2

  Daytona, a runtime platform for executing AI-generated code and agent workflows, contains a path-traversal vulnerability in versions prior to 0.186. When users specify a volume identifier to mount storage, the system failed to properly validate the path, potentially allowing an authenticated user to reference storage locations outside the intended directories. An attacker with valid credentials could craft a specially formatted volume reference to access or modify files beyond the sandbox's intended scope.

• CVE-2026-58171MEDIUM 4.2

  Vibe-Trading versions before 0.1.10 contain a path traversal vulnerability in how it constructs directories for storing run data. An authenticated user can supply a specially crafted run identifier through the MCP swarm tools that tricks the application into reading or overwriting JSON configuration files outside the intended runs directory. This allows an attacker to access or modify run.json files at arbitrary locations on the filesystem, potentially exposing or corrupting application state.

• CVE-2024-47263MEDIUM 4.1

  A path traversal flaw in Synology Hyper Backup's web API allows administrators who already have legitimate access to write files outside their intended directory. The vulnerability is constrained to non-sensitive file types, limiting immediate damage, but represents a control-boundary weakness that could enable privilege misuse or lateral movement in environments where admin accounts are compromised or where insider threat is a concern.

• CVE-2019-25734MEDIUM 4.0

  Contact Form by WD version 1.13.1 has a security flaw that combines two weaknesses: a cross-site request forgery (CSRF) vulnerability and local file inclusion (LFI). An unauthenticated attacker can craft a malicious web form that, when visited by an admin, tricks the admin's browser into loading arbitrary files from the server using directory traversal sequences. This bypasses the normal authentication checks on certain WordPress AJAX actions, potentially exposing sensitive files.

• CVE-2026-15326LOW 3.8

  Halo (up to version 2.24.2) contains a path traversal vulnerability in its theme installation functionality. An authenticated administrator with high privileges can manipulate the theme metadata name parameter to write files outside the intended theme directory, potentially overwriting or placing malicious files in unexpected locations on the server. This requires administrative-level access to exploit and does not directly compromise confidentiality, but could lead to integrity and availability issues.

• CVE-2026-45380LOW 3.6

  bit7z is a C++ library used for archive compression and extraction. Before version 4.0.12, it contained a one-byte error in how it handles symlinks when extracting 7z archives on non-Windows systems. An attacker could craft a malicious archive that creates a symlink pointing outside the intended extraction directory. Once that symlink exists, subsequent files from the same archive could be written to arbitrary locations on the system, potentially overwriting important files or placing malicious content where it will be executed.

• CVE-2026-10264LOW 3.5

  CVE-2026-10264 is a path traversal vulnerability in lharries whatsapp-mcp version 0.0.1, located in the SendMessageRequest function of the Send API Endpoint. An attacker with local access and user privileges can manipulate the mediaPath argument to traverse the file system and read sensitive files, though exploitation impact is limited to information disclosure. The vulnerability has been publicly disclosed.

• CVE-2026-9062LOW 3.4

  The Store Locator WordPress plugin versions before 1.6.9 contain a path traversal vulnerability that allows site administrators to read sensitive files from the server, such as PHP configuration files containing database credentials and authentication keys. The vulnerability requires an authenticated administrator account to exploit, limiting its immediate risk to insider threats or compromised admin accounts.

• CVE-2026-47712LOW 3.3

  Dulwich, a Python library for working with Git repositories, has a path-traversal vulnerability in how it generates patch file names. When creating patch files from Git commits, the library previously used the commit's subject line to create the filename without properly sanitizing it. An attacker could craft a malicious commit with special characters (like slashes, backslashes, or double-dots) in the subject line to trick the library into writing patch files outside the intended directory. This could allow unauthorized file creation in unexpected locations on a system using Dulwich to process untrusted commits.

• CVE-2026-49497LOW 3.3

  Ghidra, the NSA's reverse-engineering framework, contains a path traversal flaw in its debug symbol handler. When you open a malicious ELF binary, Ghidra automatically tries to load debugging information referenced in the binary's .gnu_debuglink section. An attacker can craft that section with path traversal sequences (like "../") to trick Ghidra into checking whether arbitrary files exist on your system and leaking their CRC32 checksums. This is a local attack—the attacker needs you to open a malicious file—but it can reveal information about your system's filesystem structure and contents.

• CVE-2026-56377LOW 3.3

  ImageMagick versions before 7.1.2-24 contain a flaw in how they enforce security policies that govern file operations. An attacker with local access can exploit this weakness to create or truncate files that the security policy should have blocked, potentially allowing them to write data outside the intended sandbox boundaries in conversion services. This is a path traversal issue masked by an incomplete policy validation mechanism.

• CVE-2026-8662LOW 3.3

  A path traversal flaw exists in Rapid7 InsightConnect's Compression Plugin on Linux systems. An authenticated attacker can supply specially crafted filenames to the create_archive function that cause files to be written outside their intended directory. However, because the attacker cannot control the file contents—only the path—the damage is limited to corrupting legitimate files rather than injecting malicious data. Exploitation requires valid credentials, making this primarily a risk for insider threats or compromised service accounts.

• CVE-2026-49356LOW 3.2

  Babel, a widely used JavaScript compiler, contains a vulnerability that allows attackers to read arbitrary source map files from systems running the compiler. If an attacker can control the JavaScript code being compiled and see the compiler's output, they can craft malicious code containing a sourceMappingURL comment that tricks Babel into exposing source map files they know the path to. This is a low-severity issue because it requires multiple preconditions: the attacker must have input control, output visibility, and knowledge of the exact file path of the target source map.

• CVE-2026-14967LOW 3.1

  A path traversal vulnerability in BBOT's GitHub workflows reconnaissance module allows an attacker to manipulate a crafted repository URL to write downloaded artifacts outside the intended output directory. The vulnerability exploits insufficient path sanitization—the module fails to resolve `..` sequences in file paths. However, the impact is constrained: writes are limited to two directory levels above the configured output folder, and the final destination is ultimately determined by the operator's own configuration settings, not attacker choice.

• CVE-2026-12211LOW 2.7

  A path traversal vulnerability has been discovered in Intelbras iNVU 7016 FT running firmware version 3.004.00IB000.0.T (Build 2025-09-26). An attacker with high-level administrative privileges can manipulate requests to the web interface's /RPC2_Loadfile/syslog/ endpoint to access files outside their intended directory. The vulnerability requires authentication and has limited confidentiality impact, but the vendor has already released a patched version. Public exploit code is available, though practical exploitation remains constrained by privilege requirements.

• CVE-2026-53480LOW 2.7

  Dell PowerProtect Data Domain—a backup and deduplication appliance used in enterprise data protection—contains a path traversal vulnerability affecting multiple release branches. An attacker with high-level administrative or service credentials who can reach the device remotely could modify files outside intended directories, potentially altering system behavior or corrupting protected data. The vulnerability is rated LOW severity due to the requirement for elevated privileges and limited immediate impact.

• CVE-2026-57961LOW 2.7

  phpMyFAQ versions before 4.1.5 contain a path traversal vulnerability that allows authenticated users with FAQ editing privileges to read files outside the intended content directory. An attacker would craft malicious image paths in HTML content stored in FAQ entries. When that content is exported to PDF, the vulnerable path-resolution logic fails to properly constrain file access, potentially exposing sensitive files on the server. This requires both authentication and FAQ editing permissions, significantly limiting the attack surface.

• CVE-2026-41124LOW 2.3

  Dell PowerProtect Data Domain contains a path traversal vulnerability that allows a high-privileged local attacker to read sensitive files on affected systems. The vulnerability affects multiple versions across four release lines (7.13.1.x, 8.3.1.x, 8.6.1.x, and 7.7.1.0 through 8.6). While the impact is limited to information disclosure and requires both elevated privileges and local access, organizations running these backup appliances should assess their exposure and plan remediation.