# CWE-281.

Every Advisory and CVE whose sources give the weakness CWE-281, newest first.

## Records, newest first

- [Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions](https://agentprime.io/advisories/CVE-2026-48183.md)
  `CVE-2026-48183` · CVE record: Samsung Semiconductor Exynos 1480 and 4 more · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-281
- [Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover](https://agentprime.io/advisories/CVE-2025-10149.md)
  `CVE-2025-10149` · CVE record: WSO2 WSO2 Identity Server as Key Manager and 4 more · CVSS 8.2 High · Not analysed yet · Published 19 Oct 2026 · Tags: Information disclosure, CWE-281
- [Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination](https://agentprime.io/advisories/GHSA-4ch3-9j33-3pmj.md)
  `GHSA-4ch3-9j33-3pmj`, `CVE-2026-58494`, `RUSTSEC-2026-0188` · crates.io `wasmtime-wasi`: affected `<24.0.11 || >=25.0.0, <36.0.12 || >=37.0.0, <45.0.3 || >=46.0.0, <46.0.1`, fixed in `24.0.11`, `36.0.12`, `45.0.3`, `46.0.1` · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Broken access control, CWE-281
- [Multiple jail filesystem root escapes](https://agentprime.io/advisories/CVE-2026-101306.md)
  `CVE-2026-101306` · CVE record: FreeBSD FreeBSD · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-273, CWE-281
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved.](https://agentprime.io/advisories/CVE-2026-47596.md)
  `CVE-2026-47596` · CVE record: NVIDIA GeForce and 3 more · CVSS 7.0 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-281
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DM…](https://agentprime.io/advisories/CVE-2026-47599.md)
  `CVE-2026-47599` · CVE record: NVIDIA GeForce and 2 more · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-281
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved.](https://agentprime.io/advisories/CVE-2026-47595.md)
  `CVE-2026-47595` · CVE record: NVIDIA GeForce and 3 more · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-281
- [NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved.](https://agentprime.io/advisories/CVE-2026-47489.md)
  `CVE-2026-47489` · CVE record: NVIDIA GeForce and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-281
- [uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid](https://agentprime.io/advisories/CVE-2026-93658.md)
  `CVE-2026-93658` · CVE record: uutils coreutils · CVSS 7.3 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-281
- [OpenFGA: ListUsers returns a deliberately-excluded user when a \`but not\` exclusion under a type-bound wildcard is intersected (\`and\`) with another relation that also grants that user](https://agentprime.io/advisories/GHSA-g3pg-frfm-pr2m.md)
  `GHSA-g3pg-frfm-pr2m`, `CVE-2026-61709`, `GO-2026-6488` · Go `github.com/openfga/openfga`: affected `<1.18.1`, fixed in `1.18.1` · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control, CWE-281
- [Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys](https://agentprime.io/advisories/CVE-2026-82964.md)
  `CVE-2026-82964` · CVE record: Gen Digital Avast Free Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security and 2 more · CVSS 8.8 High · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control, CWE-281, CWE-653
- [Go-getter vulnerable to a privilege escalation issue in its archive decompression handling](https://agentprime.io/advisories/CVE-2026-88922.md)
  `CVE-2026-88922` · CVE record: HashiCorp Shared library · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-281
- [rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination](https://agentprime.io/advisories/GHSA-f8g7-2xjc-7mfh.md)
  `GHSA-f8g7-2xjc-7mfh`, `BIT-rclone-2026-88016`, `CVE-2026-88016`, `GO-2026-6459` · Go `github.com/rclone/rclone`: affected `<1.75.1`, fixed in `1.75.1` · CVSS 7.1 High · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal, CWE-281
- [Improper Access Control via Secret Type Management API in WSO2 Identity Server](https://agentprime.io/advisories/CVE-2025-14779.md)
  `CVE-2025-14779` · CVE record: WSO2 WSO2 Identity Server and 2 more · CVSS 3.8 Low · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-281
- [Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private](https://agentprime.io/advisories/GHSA-q423-49rw-g9mh.md)
  `GHSA-q423-49rw-g9mh`, `CVE-2026-58510`, `GO-2026-6069` · Go `code.gitea.io/gitea`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 4.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Information disclosure, CWE-281
- [oxenstored keeps quota related use counts across domain destruction](https://agentprime.io/advisories/CVE-2026-23556.md)
  `CVE-2026-23556` · CVE record: Xen oxenstored · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-281
- [mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)](https://agentprime.io/advisories/GHSA-r9hw-mj3w-phcq.md)
  `GHSA-r9hw-mj3w-phcq`, `CVE-2026-35361` · crates.io `uu_mknod`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 3.4 Low · Not analysed yet · Published 6 Jul 2026 · Tags: Broken access control, CWE-281, CWE-459
- [mkfifo: permissions of an existing file are changed after FIFO creation fails](https://agentprime.io/advisories/GHSA-pmf6-rcx4-v53v.md)
  `GHSA-pmf6-rcx4-v53v`, `CVE-2026-35341` · crates.io `uu_mkfifo`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 7.1 High · Not analysed yet · Published 6 Jul 2026 · Tags: Broken access control, CWE-281
- [Tarfile.extract() doesn't fully respect filter parameter](https://agentprime.io/advisories/CVE-2026-4360.md)
  `CVE-2026-4360` · CVE record: Python Software Foundation CPython · CVSS 2.0 Low · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-281
- [Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher](https://agentprime.io/advisories/CVE-2026-44947.md)
  `CVE-2026-44947` · CVE record: SUSE Rancher · CVSS 6.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: CWE-281
- [golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions](https://agentprime.io/advisories/GHSA-45gg-vh54-h5m9.md)
  `GHSA-45gg-vh54-h5m9`, `CVE-2026-39828`, `GO-2026-5014` · Go `golang.org/x/crypto`: affected `<0.52.0`, fixed in `0.52.0` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS, CWE-281
- [WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-40767.md)
  `CVE-2026-40767` · CVE record: Tomdever wpForo Forum · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-281
- [Synology Surveillance Station: Improper preservation of permissions vulnerability in Archiving Push functionality in…](https://agentprime.io/advisories/CVE-2024-47270.md)
  `CVE-2024-47270` · CVE record: Synology Surveillance Station · CVSS 2.7 Low · Not analysed yet · Published 27 May 2026 · Tags: CWE-281
- [NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling.](https://agentprime.io/advisories/CVE-2026-24194.md)
  `CVE-2026-24194` · CVE record: NVIDIA GeForce and 3 more · CVSS 7.8 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-281
- [Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent](https://agentprime.io/advisories/GHSA-f5wc-c3c7-36mc.md)
  `GHSA-f5wc-c3c7-36mc`, `CVE-2026-39832`, `GO-2026-5006` · Go `golang.org/x/crypto`: affected `<0.52.0`, fixed in `0.52.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 May 2026 · Tags: CWE-281
- [Joplin Server delta API returns note content after share access is revoked](https://agentprime.io/advisories/CVE-2026-34600.md)
  `CVE-2026-34600` · CVE record: laurent22 joplin · CVSS 5.7 Medium · Not analysed yet · Published 19 May 2026 · Tags: Information disclosure, Broken access control, CWE-281
- [filemanagement_storage_service has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2026-25850.md)
  `CVE-2026-25850` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: CWE-281
- [MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue](https://agentprime.io/advisories/GHSA-rmp5-5jj7-gmvf.md)
  `GHSA-rmp5-5jj7-gmvf`, `CVE-2026-34744`, `PKSA-mqx4-yq62-zbx3` · Packagist `mantisbt/mantisbt`: affected `<2.28.2`, fixed in `2.28.2` · CVSS 5.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Information disclosure, CWE-281
- [Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations](https://agentprime.io/advisories/CVE-2025-8325.md)
  `CVE-2025-8325` · CVE record: WSO2 WSO2 API Control Plane and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: CWE-281
- [Snipe-IT has Privilege Escalation via API Permissions Assignment](https://agentprime.io/advisories/GHSA-hq28-crg7-95pr.md)
  `GHSA-hq28-crg7-95pr`, `CVE-2026-44832`, `PKSA-3w8f-xykp-s5ps` · Packagist `snipe/snipe-it`: affected `<8.4.1`, fixed in `8.4.1` · CVSS 8.7 High · Not analysed yet · Published 8 May 2026 · Tags: Broken access control, CWE-281
- [uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails](https://agentprime.io/advisories/GHSA-x2wv-9p67-mh9w.md)
  `GHSA-x2wv-9p67-mh9w`, `CVE-2026-35350` · crates.io `coreutils`: affected `<=0.8.0`, no fixed version yet · CVSS 6.6 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-281
- [uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries](https://agentprime.io/advisories/GHSA-957r-r8gc-vv3h.md)
  `GHSA-957r-r8gc-vv3h`, `CVE-2026-35351` · crates.io `coreutils`: affected `<=0.8.0`, no fixed version yet · CVSS 4.2 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-281
- [Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue](https://agentprime.io/advisories/GHSA-79rc-qpw3-jv92.md)
  `GHSA-79rc-qpw3-jv92` · crates.io `coreutils`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 3.4 Low · Withdrawn · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-281
- [OpenBSD OpenSSH: In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid…](https://agentprime.io/advisories/CVE-2026-35385.md)
  `CVE-2026-35385` · CVE record: OpenBSD OpenSSH · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: CWE-281
- [Kata Container to Guest micro VM privilege escalation](https://agentprime.io/advisories/GHSA-wwj6-vghv-5p64.md)
  `GHSA-wwj6-vghv-5p64`, `CVE-2026-24834`, `GO-2026-4517` · Go `github.com/kata-containers/kata-containers/src/runtime`: affected `<0.0.0-20260219090056-6a672503973b`, fixed in `0.0.0-20260219090056-6a672503973b` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Feb 2026 · Tags: Broken access control, CWE-281
- [A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privilege…](https://agentprime.io/advisories/CVE-2025-69875.md)
  `CVE-2025-69875` · CVE record · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2026 · Tags: Privilege escalation, Information disclosure, CWE-281
- [Networkmanager: networkmanager file access](https://agentprime.io/advisories/CVE-2025-9615.md)
  `CVE-2025-9615` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 3.3 Low · Not analysed yet · Published 26 Jan 2026 · Tags: CWE-281
- [node: A flaw in Node.js’s Permissions model allows attackers to bypass \`--allow-fs-read\` and…](https://agentprime.io/advisories/CVE-2025-55130.md)
  `CVE-2025-55130` · CVE record: nodejs node · CVSS 7.1 High · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-281, CWE-289
- [3scale-porta: readonly fields not validated server-side](https://agentprime.io/advisories/CVE-2024-12125.md)
  `CVE-2024-12125` · CVE record: 3scale porta and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Nov 2025 · Tags: CWE-281
- [Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM.](https://agentprime.io/advisories/CVE-2025-37735.md)
  `CVE-2025-37735` · CVE record: Elastic Kibana · CVSS 7.0 High · Not analysed yet · Published 6 Nov 2025 · Tags: CWE-281
- [Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation](https://agentprime.io/advisories/CVE-2025-34298.md)
  `CVE-2025-34298` · CVE record: Nagios Log Server · CVSS 8.7 High · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-281
- [Rancher user retains access to clusters despite Global Role removal in github.com/rancher/rancher](https://agentprime.io/advisories/GHSA-j4vr-pcmw-hx59.md)
  `GHSA-j4vr-pcmw-hx59`, `CVE-2023-32199`, `GO-2025-4073` · Go `github.com/rancher/rancher`: affected `<0.0.0-20251014212116-7faa74a968c2`, fixed in `0.0.0-20251014212116-7faa74a968c2` · CVSS 4.3 Medium · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-281
- [In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission due to permission overload.](https://agentprime.io/advisories/CVE-2025-26420.md)
  `CVE-2025-26420` · CVE record: Google Android · CVSS 4.4 Medium · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-281
- [pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages](https://agentprime.io/advisories/GHSA-x698-5hjm-w2m5.md)
  `GHSA-x698-5hjm-w2m5`, `CVE-2025-7346`, `PYSEC-2026-1822` · PyPI `pyload-ng`: affected `<=0.5.0b3.dev88`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 8 Jul 2025 · Tags: Broken access control, Authentication bypass, CWE-281
- [Duplicate Advisory: GHSA-x698-5hjm-w2m5](https://agentprime.io/advisories/GHSA-2wcm-vx67-3x4q.md)
  `GHSA-2wcm-vx67-3x4q` · PyPI `pyload-ng`: affected `<=0.5.0b3.dev77`, no fixed version yet · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-281
- [Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…](https://agentprime.io/advisories/CVE-2025-43698.md)
  `CVE-2025-43698` · CVE record: Salesforce OmniStudio · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-281
- [Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper)…](https://agentprime.io/advisories/CVE-2025-43697.md)
  `CVE-2025-43697` · CVE record: Salesforce OmniStudio · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-281
- [Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…](https://agentprime.io/advisories/CVE-2025-43701.md)
  `CVE-2025-43701` · CVE record: Salesforce OmniStudio · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-281
- [Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…](https://agentprime.io/advisories/CVE-2025-43700.md)
  `CVE-2025-43700` · CVE record: Salesforce OmniStudio · CVSS 7.5 High · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-281
- [Pasteboard has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2025-27247.md)
  `CVE-2025-27247` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-281
- [security_access_token has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2025-27563.md)
  `CVE-2025-27563` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-281
- [security_access_token has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2025-26693.md)
  `CVE-2025-26693` · CVE record: OpenHarmony OpenHarmony · CVSS 3.3 Low · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-281
- [telephony_call_manager has an improper preservation of permissions vulnerability](https://agentprime.io/advisories/CVE-2025-26691.md)
  `CVE-2025-26691` · CVE record: OpenHarmony OpenHarmony · CVSS 5.5 Medium · Not analysed yet · Published 8 Jun 2025 · Tags: CWE-281
- [SystemUI component protection settings vulnerability](https://agentprime.io/advisories/CVE-2024-46941.md)
  `CVE-2024-46941` · CVE record: vivo SystemUI · CVSS 4.8 Medium · Not analysed yet · Published 6 Jun 2025 · Tags: CWE-281
- [HP Support Assistant – Potential Escalation of Privilege](https://agentprime.io/advisories/CVE-2025-43026.md)
  `CVE-2025-43026` · CVE record: HP, Inc. HP Support Assistant · CVSS 7.1 High · Not analysed yet · Published 5 Jun 2025 · Tags: CWE-281
- [Privilege escalation in the management console of Absolute Secure Access prior to version 13.54](https://agentprime.io/advisories/CVE-2025-27703.md)
  `CVE-2025-27703` · CVE record: Absolute Security Secure Access · CVSS 7.0 High · Not analysed yet · Published 28 May 2025 · Tags: CWE-281
- [An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change.](https://agentprime.io/advisories/CVE-2024-57698.md)
  `CVE-2024-57698` · CVE record · CVSS 7.5 High · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-281
- [Cascading protection is not preventing file reversions](https://agentprime.io/advisories/CVE-2025-32697.md)
  `CVE-2025-32697` · CVE record: Wikimedia Foundation MediaWiki · CVSS 0.0 None · Not analysed yet · Published 10 Apr 2025 · Tags: CWE-281
- ["reupload-own" restriction can be bypassed by reverting file](https://agentprime.io/advisories/CVE-2025-32696.md)
  `CVE-2025-32696` · CVE record: Wikimedia Foundation MediaWiki · CVSS 0.0 None · Not analysed yet · Published 10 Apr 2025 · Tags: CWE-281
- [A parsing issue in the handling of directory paths was addressed with improved path validation.](https://agentprime.io/advisories/CVE-2025-30456.md)
  `CVE-2025-30456` · CVE record: Apple iOS and iPadOS and 1 more · CVSS 7.8 High · Not analysed yet · Published 31 Mar 2025 · Tags: CWE-281

Older: <https://agentprime.io/advisories/tag/cwe-281.md?cursor=WyIyMDI1LTAzLTMxVDIyOjIzOjQ1LjYzMjAwMFoiLCJDVkUtMjAyNS0zMDQ1NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-281>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-281/>. Everything for agents: <https://agentprime.io/llms.txt>.