agentprime: CWE-29

CVE-2026-66152: SonicWall NetExtender: A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor…

Tue, 25 Aug 2026 19:58:47 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

MLFlow Path Traversal Vulnerability

Mon, 29 Jun 2026 11:50:44 GMT

mlflow <2.9.2, fixed in 2.9.2. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Remote Code Execution via path traversal bypass in lollms

Mon, 29 Jun 2026 11:50:41 GMT

lollms >=5.9.0, <9.5.1, fixed in 9.5.1. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

decompress: Arbitrary File Write via Archive Extraction (Zip Slip)

Fri, 05 Jun 2026 09:33:46 GMT

decompress <=4.2.1, no fixed version yet. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-24217: NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file.

Wed, 20 May 2026 17:47:28 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-5627: Path Traversal in mintplex-labs/anything-llm

Tue, 07 Apr 2026 13:06:38 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

MLFlow path traversal vulnerability

Mon, 30 Mar 2026 03:30:19 GMT

mlflow <3.9.0rc0, fixed in 3.9.0rc0. CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-30828: Wallos: SSRF via url parameter leading to File Traversal

Sat, 07 Mar 2026 05:27:13 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-66608: A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

Mon, 09 Feb 2026 03:11:56 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2356: Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui

Mon, 02 Feb 2026 10:36:23 GMT

CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

MQTT does not validate hostnames

Thu, 06 Nov 2025 21:31:31 GMT

mqtt <0.7.0, fixed in 0.7.0. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-58291: Denial of service (DoS) vulnerability in the office service.

Sat, 11 Oct 2025 08:51:04 GMT

CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-50185: DbGate allows Unauthorized File Access via CSV Plugin

Sat, 26 Jul 2025 03:34:43 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-50184: DbGate allows for File Traversal via file parameter

Sat, 26 Jul 2025 03:27:05 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

LlamaIndex vulnerable to Path Traversal attack through its encode_image function

Mon, 07 Jul 2025 15:30:37 GMT

llama-index-core >=0.11.23, <0.12.41, fixed in 0.12.41. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

MLflow has a Local File Read/Path Traversal in dbfs

Thu, 20 Mar 2025 12:32:49 GMT

mlflow <2.17.0rc0, fixed in 2.17.0rc0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AgentScope path traversal vulnerability

Thu, 20 Mar 2025 12:32:48 GMT

agentscope <=0.1.1, no fixed version yet. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Aim path traversal in LockManager.release_locks

Thu, 20 Mar 2025 12:32:48 GMT

aim >=3.15.0, <=3.27.0, no fixed version yet. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Withdrawn Advisory: Open WebUI Allows Arbitrary File Write via the `download_model` Endpoint

Thu, 20 Mar 2025 12:32:45 GMT

open-webui <=0.3.8, no fixed version yet. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Gradio Vulnerable to Arbitrary File Deletion

Thu, 20 Mar 2025 12:32:39 GMT

gradio >=4.0.0, <=5.0.0b2, no fixed version yet. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-8248: Path Traversal in mintplex-labs/anything-llm

Thu, 20 Mar 2025 10:11:32 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-12389: Path Traversal in binary-husky/gpt_academic

Thu, 20 Mar 2025 10:10:43 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-8982: Local File Inclusion in bentoml/openllm

Thu, 20 Mar 2025 10:10:25 GMT

CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-7957: Arbitrary File Overwrite in danswer-ai/danswer

Thu, 20 Mar 2025 10:10:21 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-11170: Path Traversal in danny-avila/librechat

Thu, 20 Mar 2025 10:08:59 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-13059: Path Traversal in mintplex-labs/anything-llm

Mon, 10 Feb 2025 18:53:04 GMT

CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.24 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-51534: Dell PowerProtect DD: Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50…

Sat, 01 Feb 2025 04:02:24 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) due to improper destination file path validation in the _extract_packages_archive...

Tue, 10 Dec 2024 05:15:07 GMT

luigi <3.6.0, fixed in 3.6.0. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Langchain Path Traversal vulnerability

Tue, 29 Oct 2024 15:32:05 GMT

langchain <0.2.19, fixed in 0.2.19. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matc...

Tue, 29 Oct 2024 13:15:00 GMT

chuanhuchatgpt *, no fixed version yet. CVSS 7.5 (High). Published by OSV. Not analysed by agentprime yet.

CVE-2024-6394: Local File Inclusion in parisneo/lollms-webui

Mon, 30 Sep 2024 08:09:10 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-6396: Arbitrary File Overwrite and Data Exfiltration in aimhubio/aim

Fri, 12 Jul 2024 00:00:14 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.53 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-5926: Path Traversal in stitionai/devika

Sun, 30 Jun 2024 00:00:13 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

lollms vulnerable to dot-dot-slash path traversal in XTTS server

Thu, 27 Jun 2024 21:32:08 GMT

lollms <=9.5.1, no fixed version yet. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-4841: Path Traversal in parisneo/lollms-webui

Sun, 23 Jun 2024 14:33:33 GMT

CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Zip slip in opencart

Sat, 22 Jun 2024 06:30:37 GMT

opencart/opencart >=4.0.0.0, no fixed version yet. CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.14 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-5211: Path Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llm

Wed, 12 Jun 2024 11:33:42 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

LoLLMS Path Traversal vulnerability

Thu, 06 Jun 2024 21:30:37 GMT

lollms <9.5.0, fixed in 9.5.0. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.28 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failur...

Thu, 06 Jun 2024 19:15:55 GMT

mlflow <2.11.3, fixed in 2.11.3. CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.22 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-2360: Path Traversal leading to Remote Code Execution in parisneo/lollms-webui

Thu, 06 Jun 2024 18:55:02 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-4320: Remote Code Execution due to LFI in '/install_extension' in parisneo/lollms-webui

Thu, 06 Jun 2024 18:22:40 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.34 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2624: Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui

Thu, 06 Jun 2024 18:11:44 GMT

CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2914: TarSlip Vulnerability in deepjavalibrary/djl

Thu, 06 Jun 2024 17:55:55 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2178: Path Traversal Vulnerability in parisneo/lollms-webui

Sun, 02 Jun 2024 10:52:32 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of...

Thu, 16 May 2024 09:15:14 GMT

mlflow <2.12.1, fixed in 2.12.1. CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.43 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-2361: Arbitrary Upload & Read via Path Traversal in parisneo/lollms-webui

Thu, 16 May 2024 09:03:50 GMT

CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-3435: Path Traversal in parisneo/lollms-webui

Thu, 16 May 2024 09:03:48 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-4322: Path Traversal in parisneo/lollms-webui

Thu, 16 May 2024 09:03:45 GMT

CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.31 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-2358: Path Traversal leading to Remote Code Execution in parisneo/lollms-webui

Thu, 16 May 2024 09:03:45 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-34470: An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18.

Mon, 06 May 2024 00:00:00 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.