# CWE-424.

Every Advisory and CVE whose sources give the weakness CWE-424, newest first.

## Records, newest first

- [Docker Desktop WSL2 AF_VSOCK isolation bypass via 32-bit socketcall](https://agentprime.io/advisories/CVE-2026-112917.md)
  `CVE-2026-112917` · CVE record: Docker Docker Desktop · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-424
- [OpenStack Ironic: OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting…](https://agentprime.io/advisories/CVE-2026-89419.md)
  `CVE-2026-89419` · CVE record: OpenStack Ironic · CVSS 5.0 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-424
- [Grav Flex Objects 1.4.0 before 1.4.17 Authorization Bypass via Pages API Routes](https://agentprime.io/advisories/CVE-2026-114659.md)
  `CVE-2026-114659` · CVE record: getgrav grav-plugin-flex-objects · CVSS 7.1 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-424
- [Improper Protection of Alternate Path in Splunk SOAR](https://agentprime.io/advisories/CVE-2026-76529.md)
  `CVE-2026-76529` · CVE record: Splunk Splunk SOAR · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-424
- [\`wasi-http\` p3: forwarded trailers aren't checked against \`is_forbidden_header\` hook](https://agentprime.io/advisories/GHSA-jxcf-8qw5-5c33.md)
  `GHSA-jxcf-8qw5-5c33`, `CVE-2026-121440`, `RUSTSEC-2026-0377` · crates.io `wasmtime-wasi-http`: affected `>=46.0.0, <48.0.7 || >=49.0.0, <49.0.4`, fixed in `48.0.7`, `49.0.4` · CVSS 6.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-424
- [Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets](https://agentprime.io/advisories/CVE-2026-110865.md)
  `CVE-2026-110865` · CVE record: renovatebot renovate and 4 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-424
- [Windows AppX Deployment Service Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-69979.md)
  `CVE-2026-69979` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-424
- [Missing authorization checks in Amazon Athena engine version 3 request handling](https://agentprime.io/advisories/CVE-2026-107352.md)
  `CVE-2026-107352` · CVE record: AWS Amazon Athena · CVSS 6.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control, CWE-424
- [Arbitrary file read via the convert_playwright_script prompt in mcp-k6](https://agentprime.io/advisories/CVE-2026-89039.md)
  `CVE-2026-89039` · CVE record: Grafana mcp-k6 · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal, CWE-424
- [copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers](https://agentprime.io/advisories/CVE-2026-93353.md)
  `CVE-2026-93353` · CVE record: 9001 copyparty · CVSS 2.3 Low · Not analysed yet · Published 24 Sept 2026 · Tags: Path traversal, CWE-424
- [CrewAI: CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level…](https://agentprime.io/advisories/CVE-2026-37008.md)
  `CVE-2026-37008` · CVE record: CrewAI CrewAI · CVSS 8.1 High · Not analysed yet · Published 13 Sept 2026 · Tags: CWE-424
- [AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes](https://agentprime.io/advisories/GHSA-37jv-wc37-fhcw.md)
  `GHSA-37jv-wc37-fhcw`, `CVE-2026-82586`, `EEF-CVE-2026-82586` · Hex `ash_lua`: affected `>=0.1.0, <0.2.1`, fixed in `0.2.1` · CVSS 8.2 High · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-424
- [ash_authentication_oauth2_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls](https://agentprime.io/advisories/GHSA-wwxg-h779-3wf4.md)
  `GHSA-wwxg-h779-3wf4`, `CVE-2026-82754`, `EEF-CVE-2026-82754` · Hex `ash_authentication_oauth2_server`: affected `>=0.1.0, <0.3.1`, fixed in `0.3.1` · CVSS 6.3 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: CWE-424
- [PCRE2: PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached…](https://agentprime.io/advisories/CVE-2026-86145.md)
  `CVE-2026-86145` · CVE record: PCRE PCRE2 · CVSS 8.2 High · Not analysed yet · Published 5 Sept 2026 · Tags: CWE-424
- [Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false](https://agentprime.io/advisories/CVE-2026-66756.md)
  `CVE-2026-66756` · CVE record: Apache Software Foundation Apache Tika · CVSS 6.9 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-424
- [Gitea: Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)](https://agentprime.io/advisories/GHSA-25gq-j9jx-43pg.md)
  `GHSA-25gq-j9jx-43pg`, `CVE-2026-58428`, `GO-2026-6028` · Go `code.gitea.io/gitea`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Unrestricted file upload, CWE-424
- [OpenStack Ironic: In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using…](https://agentprime.io/advisories/CVE-2026-54423.md)
  `CVE-2026-54423` · CVE record: OpenStack Ironic · CVSS 8.2 High · Not analysed yet · Published 10 Jul 2026 · Tags: CWE-424
- [Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux](https://agentprime.io/advisories/CVE-2026-0268.md)
  `CVE-2026-0268` · CVE record: Palo Alto Networks Prisma Access Agent · CVSS 4.4 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-424
- [Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass](https://agentprime.io/advisories/CVE-2026-0237.md)
  `CVE-2026-0237` · CVE record: Palo Alto Networks Prisma Browser · CVSS 7.3 High · Not analysed yet · Published 13 May 2026 · Tags: CWE-424
- [Improper protection of an alternate path in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to retain access when their account has been disabled.](https://agentprime.io/advisories/CVE-2026-4913.md)
  `CVE-2026-4913` · CVE record: Ivanti Neurons for ITSM (On-Premise) and 1 more · CVSS 5.7 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-424
- [Improper Protection of Alternate Path exists in the no-access and workdir feature of the AWS API MCP Server versions >= 0.2.14 and < 1.3.9 on all platforms may allow the bypass of intended file acc...](https://agentprime.io/advisories/GHSA-2cpp-j2fc-qhp7.md)
  `GHSA-2cpp-j2fc-qhp7`, `CVE-2026-4270`, `PYSEC-2026-162` · PyPI `awslabs-aws-api-mcp-server`: affected `>=0.2.14, <1.3.9`, fixed in `1.3.9` · CVSS 6.8 Medium · Not analysed yet · Published 16 Mar 2026 · Tags: CWE-424
- [Gitea allows attackers to add attachments with forbidden file extensions](https://agentprime.io/advisories/GHSA-263q-5cv3-xq9g.md)
  `GHSA-263q-5cv3-xq9g`, `BIT-gitea-2025-68939`, `CVE-2025-68939`, `GO-2025-4261` · Go `code.gitea.io/gitea`: affected `<1.23.0-rc0`, fixed in `1.23.0-rc0` · CVSS 8.2 High · Not analysed yet · Published 26 Dec 2025 · Tags: CWE-424
- [Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser](https://agentprime.io/advisories/CVE-2025-4617.md)
  `CVE-2025-4617` · CVE record: Palo Alto Networks Prisma Browser · CVSS 1.1 Low · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-424
- [NEOJAPAN Inc. desknet's NEO: Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0…](https://agentprime.io/advisories/CVE-2025-58079.md)
  `CVE-2025-58079` · CVE record: NEOJAPAN Inc. desknet's NEO · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-424
- [Privilege Management for Windows - Elevation of Privilege](https://agentprime.io/advisories/CVE-2025-6250.md)
  `CVE-2025-6250` · CVE record: BeyondTrust Privilege Management for Windows · CVSS 7.1 High · Not analysed yet · Published 28 Jul 2025 · Tags: CWE-424
- [Arris VIP1113: Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image…](https://agentprime.io/advisories/CVE-2025-49163.md)
  `CVE-2025-49163` · CVE record: Arris VIP1113 · CVSS 6.7 Medium · Not analysed yet · Published 2 Jun 2025 · Tags: CWE-424
- [Arris VIP1113: Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP…](https://agentprime.io/advisories/CVE-2025-49162.md)
  `CVE-2025-49162` · CVE record: Arris VIP1113 · CVSS 6.4 Medium · Not analysed yet · Published 2 Jun 2025 · Tags: CWE-424
- [vBulletin: Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing…](https://agentprime.io/advisories/CVE-2025-48828.md)
  `CVE-2025-48828` · CVE record: vBulletin vBulletin · CVSS 9.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.57 · Not analysed yet · Published 27 May 2025 · Tags: CWE-424
- [vBulletin: vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to…](https://agentprime.io/advisories/CVE-2025-48827.md)
  `CVE-2025-48827` · CVE record: vBulletin vBulletin · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.76 · Not analysed yet · Published 27 May 2025 · Tags: CWE-424
- [HackMD CodiMD: CodiMD through 2.5.4 has a CSP-based protection mechanism against XSS through uploaded…](https://agentprime.io/advisories/CVE-2025-46655.md)
  `CVE-2025-46655` · CVE record: HackMD CodiMD · CVSS 4.9 Medium · Not analysed yet · Published 26 Apr 2025 · Tags: CWE-424
- [HackMD CodiMD: CodiMD through 2.2.0 has a CSP-based protection mechanism against XSS through uploaded…](https://agentprime.io/advisories/CVE-2025-46654.md)
  `CVE-2025-46654` · CVE record: HackMD CodiMD · CVSS 4.9 Medium · Not analysed yet · Published 26 Apr 2025 · Tags: CWE-424
- [yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a \`\_\_class\` Array Key](https://agentprime.io/advisories/GHSA-ggwg-cmwp-46r5.md)
  `GHSA-ggwg-cmwp-46r5`, `CVE-2024-58136`, `PKSA-zmx9-v1jv-dy8s` · Packagist `yiisoft/yii2`: affected `<2.0.52`, fixed in `2.0.52` · CVSS 9.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.88 · Not analysed yet · Published 10 Apr 2025 · Tags: CWE-424
- [Cortex XDR Broker VM: Unauthorized Access to Broker VM Docker Containers](https://agentprime.io/advisories/CVE-2025-0113.md)
  `CVE-2025-0113` · CVE record: Palo Alto Networks Cortex XDR Broker VM · CVSS 5.3 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-424
- [Container Escape Vulnerability in TR7's Application Security Platform (ASP)](https://agentprime.io/advisories/CVE-2024-8781.md)
  `CVE-2024-8781` · CVE record: TR7 Application Security Platform (ASP) · CVSS 8.7 High · Not analysed yet · Published 18 Nov 2024 · Tags: Privilege escalation, CWE-424
- [Siemens HiMed Cockpit 12 pro: A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All…](https://agentprime.io/advisories/CVE-2023-52952.md)
  `CVE-2023-52952` · CVE record: Siemens HiMed Cockpit 12 pro and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-424
- [Improper Protection of Alternate Path in GitLab](https://agentprime.io/advisories/CVE-2024-8311.md)
  `CVE-2024-8311` · CVE record: GitLab GitLab · CVSS 6.5 Medium · Not analysed yet · Published 12 Sept 2024 · Tags: CWE-424
- [Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass](https://agentprime.io/advisories/CVE-2024-3927.md)
  `CVE-2024-3927` · CVE record: bdthemes Element Pack – Widgets, Templates & Addons for Elementor · CVSS 5.3 Medium · Not analysed yet · Published 22 May 2024 · Tags: CWE-424
- [Kioware: In KioWare for Windows (versions all through 8.34) it is possible to exit this software…](https://agentprime.io/advisories/CVE-2024-3460.md)
  `CVE-2024-3460` · CVE record: Kioware Kioware · CVSS 7.4 High · Not analysed yet · Published 9 May 2024 · Tags: CWE-424
- [Kioware: KioWare for Windows (versions all through 8.34) allows to escape the environment by…](https://agentprime.io/advisories/CVE-2024-3459.md)
  `CVE-2024-3459` · CVE record: Kioware Kioware · CVSS 8.4 High · Not analysed yet · Published 9 May 2024 · Tags: CWE-424
- [A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files to the web root of the application.](https://agentprime.io/advisories/CVE-2023-20272.md)
  `CVE-2023-20272` · CVE record: Cisco Cisco Identity Services Engine Software · CVSS 6.7 Medium · Not analysed yet · Published 21 Nov 2023 · Tags: CWE-424
- [IBM MQ privilege escalation](https://agentprime.io/advisories/CVE-2023-46176.md)
  `CVE-2023-46176` · CVE record: IBM MQ Appliance · CVSS 6.7 Medium · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-424
- [Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell](https://agentprime.io/advisories/CVE-2023-5165.md)
  `CVE-2023-5165` · CVE record: Docker Inc. Docker Desktop · CVSS 7.1 High · Not analysed yet · Published 25 Sept 2023 · Tags: Broken access control, CWE-424
- [Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers](https://agentprime.io/advisories/CVE-2023-0629.md)
  `CVE-2023-0629` · CVE record: Docker Inc. Docker Desktop · CVSS 7.1 High · Not analysed yet · Published 13 Mar 2023 · Tags: CWE-424, CWE-501
- [2.2.4 IMPROPER PROTECTION OF ALTERNATE PATH CWE-424](https://agentprime.io/advisories/CVE-2022-1742.md)
  `CVE-2022-1742` · CVE record: Dominion Voting Systems ImageCast X application and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 24 Jun 2022 · Tags: CWE-424
- [Improper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1 allows physical attacker to install package before completion of Setup wizard.](https://agentprime.io/advisories/CVE-2022-28782.md)
  `CVE-2022-28782` · CVE record: Samsung Mobile Samsung Mobile Devices · CVSS 4.6 Medium · Not analysed yet · Published 3 May 2022 · Tags: CWE-424
- [Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.](https://agentprime.io/advisories/CVE-2022-24932.md)
  `CVE-2022-24932` · CVE record: Samsung Mobile Samsung Mobile Devices and 1 more · CVSS 4.2 Medium · Not analysed yet · Published 8 Mar 2022 · Tags: CWE-424
- [Motorola Binatone Hubble Cameras: An improper access control vulnerability was reported in some Motorola-branded Binatone…](https://agentprime.io/advisories/CVE-2021-3793.md)
  `CVE-2021-3793` · CVE record: Motorola Binatone Hubble Cameras · CVSS 6.5 Medium · Not analysed yet · Published 12 Nov 2021 · Tags: CWE-424
- [ABB PB610 HMIStudio accepts malicious DLL file in an application](https://agentprime.io/advisories/CVE-2019-18996.md)
  `CVE-2019-18996` · CVE record: ABB PB610 Panel Builder 600 · CVSS 7.1 High · Not analysed yet · Published 18 Dec 2019 · Tags: CWE-424
- [PB610 HMISimulator provides interface with access to arbitrary files](https://agentprime.io/advisories/CVE-2019-18997.md)
  `CVE-2019-18997` · CVE record: ABB PB610 Panel Builder 600 · CVSS 4.3 Medium · Not analysed yet · Published 18 Dec 2019 · Tags: CWE-424

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-424>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-424/>. Everything for agents: <https://agentprime.io/llms.txt>.