# CWE-427.

Every Advisory and CVE whose sources give the weakness CWE-427, newest first.

## Records, newest first

- [Uncontrolled search path in Adobe Illustrator CC](https://agentprime.io/advisories/CVE-2019-16447.md)
  `CVE-2019-16447` · CVE record: Adobe Adobe Illustrator CC · CVSS 7.8 High · Not analysed yet · Published 6 Nov 2026 · Tags: CWE-427
- [Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe](https://agentprime.io/advisories/CVE-2026-122133.md)
  `CVE-2026-122133` · CVE record: mistralai mistral-vibe · CVSS 8.6 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-427
- [Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer](https://agentprime.io/advisories/CVE-2026-59264.md)
  `CVE-2026-59264` · CVE record: Apache Software Foundation Apache OpenOffice · CVSS 7.8 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-427
- [Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable](https://agentprime.io/advisories/CVE-2026-88066.md)
  `CVE-2026-88066` · CVE record: anthropics claude-code · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-427
- [SolarWinds Dameware DLL Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2026-28327.md)
  `CVE-2026-28327` · CVE record: SolarWinds Dameware · CVSS 8.2 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-427
- [pgAdmin 4: Utility binary path can point at a shared storage directory](https://agentprime.io/advisories/CVE-2026-116243.md)
  `CVE-2026-116243` · CVE record: pgadmin.org pgAdmin 4 · CVSS 7.7 High · Not analysed yet · Published 30 Oct 2026 · Tags: CWE-426, CWE-427
- [Uncontrolled search path in Yamaha Corporation Yamaha LAN Monitor for Windows](https://agentprime.io/advisories/CVE-2026-103665.md)
  `CVE-2026-103665` · CVE record: Yamaha Corporation Yamaha LAN Monitor for Windows · CVSS 8.4 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-427
- [CVE-2026-118131](https://agentprime.io/advisories/CVE-2026-118131.md)
  `CVE-2026-118131` · CVE record: GnuPG GnuPG · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Broken access control, CWE-379, CWE-427
- [Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2026-104349.md)
  `CVE-2026-104349` · CVE record: Adobe Creative Cloud Desktop Application · CVSS 7.3 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-427
- [An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic](https://agentprime.io/advisories/CVE-2026-107090.md)
  `CVE-2026-107090` · CVE record · CVSS 7.8 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-427
- [HP One Agent Software – Security Update](https://agentprime.io/advisories/CVE-2026-91093.md)
  `CVE-2026-91093` · CVE record: HP Inc. HP One Agent Software · CVSS 8.5 High · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-427
- [Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-92202.md)
  `CVE-2026-92202` · CVE record: Luxion KeyShot · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-427
- [Uncontrolled search path in ASUS Armoury Crate and others](https://agentprime.io/advisories/CVE-2026-102438.md)
  `CVE-2026-102438` · CVE record: ASUS Armoury Crate and 1 more · CVSS 8.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-427
- [Uncontrolled search path in Dell Application Store](https://agentprime.io/advisories/CVE-2026-71170.md)
  `CVE-2026-71170` · CVE record: Dell Application Store · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-427
- [Uncontrolled search path in Siemens Software Center](https://agentprime.io/advisories/CVE-2026-110936.md)
  `CVE-2026-110936` · CVE record: Siemens Siemens Software Center · CVSS 8.4 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-427
- [Metalama allows local code execution through DLL planting in shared temporary directories](https://agentprime.io/advisories/GHSA-m6wq-39m7-9xpp.md)
  `GHSA-m6wq-39m7-9xpp`, `CVE-2026-62847` · NuGet `Metalama.Framework` and 1 more: affected `<2025.1.18 || >=2026.0.0-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19`, fixed in `2025.1.18`, `2026.0.25`, `2026.1.19` · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-377, CWE-427
- [HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking](https://agentprime.io/advisories/CVE-2026-108390.md)
  `CVE-2026-108390` · CVE record: hestiacp hestiacp · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection, Code injection, CWE-427
- [Dimension | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2026-103845.md)
  `CVE-2026-103845` · CVE record: Adobe Adobe Dimension · CVSS 8.6 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-427
- [Windows AI Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69923.md)
  `CVE-2026-69923` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-427
- [ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate](https://agentprime.io/advisories/CVE-2026-108693.md)
  `CVE-2026-108693` · CVE record: ImageMagick ImageMagick · CVSS 7.3 High · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-427
- [PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification](https://agentprime.io/advisories/GHSA-m6wp-h223-4c8g.md)
  `GHSA-m6wp-h223-4c8g`, `CVE-2026-61446`, `PYSEC-2026-4271` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 8.6 High · Not analysed yet · Published 8 Oct 2026 · Tags: Code injection, CWE-427
- [DLL search order hijacking via screenhooks libraries in TightVNC Server](https://agentprime.io/advisories/CVE-2026-107615.md)
  `CVE-2026-107615` · CVE record: GlavSoft TightVNC · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-427
- [knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json](https://agentprime.io/advisories/GHSA-mc52-mwq4-vfx3.md)
  `GHSA-mc52-mwq4-vfx3`, `CVE-2026-86540` · npm `knowns`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 8.5 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection, Code injection, CWE-427, CWE-829
- [Uncontrolled search path in Google Chrome](https://agentprime.io/advisories/CVE-2026-106186.md)
  `CVE-2026-106186` · CVE record: Google Chrome · CVSS 8.6 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-427
- [Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution](https://agentprime.io/advisories/CVE-2026-104809.md)
  `CVE-2026-104809` · CVE record: Mitel Mitel MiVoice Office 400 · CVSS 8.4 High · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal, CWE-426, CWE-427, CWE-494
- [GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution](https://agentprime.io/advisories/GHSA-239g-whfq-7xj9.md)
  `GHSA-239g-whfq-7xj9`, `CVE-2026-87817`, `PYSEC-2026-3982` · PyPI `gitpython`: affected `<3.1.60`, fixed in `3.1.60` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Code injection, CWE-427
- [Uncontrolled search path in NVIDIA GeForce and others](https://agentprime.io/advisories/CVE-2026-47570.md)
  `CVE-2026-47570` · CVE record: NVIDIA GeForce and 3 more · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-427
- [Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation](https://agentprime.io/advisories/CVE-2026-89325.md)
  `CVE-2026-89325` · CVE record: Rapid7 Insight Agent · CVSS 7.8 High · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-427
- [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2026-6935.md)
  `CVE-2026-6935` · CVE record: IBM Concert · CVSS 7.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-427
- [Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking](https://agentprime.io/advisories/CVE-2026-91803.md)
  `CVE-2026-91803` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 8.8 High · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-427
- [Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair](https://agentprime.io/advisories/CVE-2026-83598.md)
  `CVE-2026-83598` · CVE record: netdata netdata · CVSS 7.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: Privilege escalation, CWE-427
- [Uncontrolled Search Path Element in Qualcomm Software Center](https://agentprime.io/advisories/CVE-2026-25264.md)
  `CVE-2026-25264` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-427
- [NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing \`tests/\_\_init\_\_.py\` + SSRF via unfixed \`NETBOX_DT_LIBRARY_URL\` → Cloud Metadata credential theft](https://agentprime.io/advisories/CVE-2026-54916.md)
  `CVE-2026-54916` · CVE record: netbox-community devicetype-library · CVSS 8.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-427, CWE-829
- [Uncontrolled search path in Dell Driver Pack For Windows OS and others](https://agentprime.io/advisories/CVE-2026-56795.md)
  `CVE-2026-56795` · CVE record: Dell Driver Pack For Windows OS and 3 more · CVSS 8.2 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-427
- [GeoVision GV-Remote E-Map dll hijacking vulnerability](https://agentprime.io/advisories/CVE-2026-92838.md)
  `CVE-2026-92838` · CVE record: GeoVision Inc. GV-Remote E-map · CVSS 7.8 High · Not analysed yet · Published 17 Sept 2026 · Tags: CWE-427
- [pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-92180.md)
  `CVE-2026-92180` · CVE record: pdfforge PDF Architect · CVSS 7.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-427
- [Uncontrolled search path in Rakuten Kobo Inc. The installer for Rakuten Kobo Desktop Application (Windows…](https://agentprime.io/advisories/CVE-2026-68955.md)
  `CVE-2026-68955` · CVE record: Rakuten Kobo Inc. The installer for Rakuten Kobo Desktop Application (Windows version) · CVSS 8.4 High · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-427
- [Uncontrolled search path in Google Chrome](https://agentprime.io/advisories/CVE-2026-87530.md)
  `CVE-2026-87530` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-427
- [Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2026-76199.md)
  `CVE-2026-76199` · CVE record: Adobe Photoshop 2026 and 1 more · CVSS 8.6 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-427
- [Windows Hello Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-72980.md)
  `CVE-2026-72980` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-427
- [Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe](https://agentprime.io/advisories/CVE-2026-6958.md)
  `CVE-2026-6958` · CVE record: Invicti Security Corp. Acunetix · CVSS 8.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-427
- [NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary](https://agentprime.io/advisories/GHSA-6hwm-xvph-95vm.md)
  `GHSA-6hwm-xvph-95vm`, `CVE-2026-78680`, `PYSEC-2026-3868` · PyPI `nltk`: affected `<3.10.3`, fixed in `3.10.3` · CVSS 8.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-426, CWE-427
- [Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path](https://agentprime.io/advisories/CVE-2026-45221.md)
  `CVE-2026-45221` · CVE record: EASYBYTE Software Konga · CVSS 8.5 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-427
- [Uncontrolled search path in OpenAI Codex Desktop and others](https://agentprime.io/advisories/CVE-2026-19590.md)
  `CVE-2026-19590` · CVE record: OpenAI Codex Desktop and 1 more · CVSS 7.3 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-427
- [SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path](https://agentprime.io/advisories/CVE-2026-82649.md)
  `CVE-2026-82649` · CVE record: siyuan-note siyuan · CVSS 7.0 High · Not analysed yet · Published 30 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in NVIDIA OpenShell](https://agentprime.io/advisories/CVE-2026-65093.md)
  `CVE-2026-65093` · CVE record: NVIDIA OpenShell · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-427
- [Windows Remote Help Defense Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-55013.md)
  `CVE-2026-55013` · CVE record: Microsoft Windows Remote Help · CVSS 7.1 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-427
- [Microsoft Remote Help Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-55015.md)
  `CVE-2026-55015` · CVE record: Microsoft Windows Remote Help · CVSS 5.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-427
- [Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.](https://agentprime.io/advisories/CVE-2026-59781.md)
  `CVE-2026-59781` · CVE record: Zabbix Zabbix · CVSS 5.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in Dell ObjectScale](https://agentprime.io/advisories/CVE-2026-56090.md)
  `CVE-2026-56090` · CVE record: Dell ObjectScale · CVSS 7.3 High · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-427
- [An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file.](https://agentprime.io/advisories/CVE-2026-50773.md)
  `CVE-2026-50773` · CVE record · CVSS 7.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-427
- [Prisma Access Agent: Local Privilege Escalation](https://agentprime.io/advisories/CVE-2026-0294.md)
  `CVE-2026-0294` · CVE record: Palo Alto Networks Prisma Access Agent · CVSS 6.0 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-427
- [IBM i is Affected By Remote Code Execution Vulnerability \[\]](https://agentprime.io/advisories/CVE-2026-16860.md)
  `CVE-2026-16860` · CVE record: IBM i · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in AMD Ryzen™ Master and others](https://agentprime.io/advisories/CVE-2025-54512.md)
  `CVE-2025-54512` · CVE record: AMD AMD Ryzen™ Master and 2 more · CVSS 7.0 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in AMD Power Design Manager (PDM) Software Un-Installer](https://agentprime.io/advisories/CVE-2025-8087.md)
  `CVE-2025-8087` · CVE record: AMD AMD Power Design Manager (PDM) Software Un-Installer · CVSS 7.0 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in AMD Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows](https://agentprime.io/advisories/CVE-2025-48506.md)
  `CVE-2025-48506` · CVE record: AMD Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows · CVSS 7.3 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in AMD Vitis™ Embedded Single File Download (SFD) for Windows](https://agentprime.io/advisories/CVE-2025-0041.md)
  `CVE-2025-0041` · CVE record: AMD Vitis™ Embedded Single File Download (SFD) for Windows · CVSS 7.3 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in Hardware-Aware-Automated-MachineLearning NA](https://agentprime.io/advisories/CVE-2026-34175.md)
  `CVE-2026-34175` · CVE record: Hardware-Aware-Automated-MachineLearning NA · CVSS 5.4 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in Approximate Bayesian Inference Framework](https://agentprime.io/advisories/CVE-2026-32788.md)
  `CVE-2026-32788` · CVE record: Approximate Bayesian Inference Framework · CVSS 5.4 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in EquiTriton](https://agentprime.io/advisories/CVE-2026-28700.md)
  `CVE-2026-28700` · CVE record: EquiTriton · CVSS 5.4 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-427

Older: <https://agentprime.io/advisories/tag/cwe-427.md?cursor=WyIyMDI2LTA4LTExVDE2OjI3OjUyLjYxMDAwMFoiLCJDVkUtMjAyNi0yODcwMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-427>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-427/>. Everything for agents: <https://agentprime.io/llms.txt>.