# CWE-610.

Every Advisory and CVE whose sources give the weakness CWE-610, newest first.

## Records, newest first

- [Stirling-PDF: SVG→PDF local file read (LFI) via SVG-sanitizer and Batik same-origin bypass](https://agentprime.io/advisories/CVE-2026-119342.md)
  `CVE-2026-119342` · CVE record: Stirling-Tools Stirling-PDF · CVSS 5.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-20, CWE-610
- [HCL BigFix AEX is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2026-67077.md)
  `CVE-2026-67077` · CVE record: HCL Software BigFix AEX · CVSS 4.2 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-441, CWE-610
- [Google Chrome: Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57…](https://agentprime.io/advisories/CVE-2026-95376.md)
  `CVE-2026-95376` · CVE record: Google Chrome · CVSS 8.0 High · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-610
- [jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution](https://agentprime.io/advisories/GHSA-wjgm-6hv5-3cvf.md)
  `GHSA-wjgm-6hv5-3cvf`, `CVE-2026-19032` · Maven `com.fasterxml.jackson.core:jackson-databind` and 1 more: affected `>=2.8.0, <2.18.10 || >=2.19.0, <2.21.6 || >=2.22.0, <2.22.2`, fixed in `2.18.10`, `2.21.6`, `2.22.2` · CVSS 5.3 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Code injection, CWE-610
- [Confused Deputy in Application Integration allows Internal File Read](https://agentprime.io/advisories/CVE-2026-81375.md)
  `CVE-2026-81375` · CVE record: Google Cloud Application Integration · CVSS 8.3 High · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-610
- [HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and downloading code without integrity checking](https://agentprime.io/advisories/CVE-2026-21810.md)
  `CVE-2026-21810` · CVE record: HCLSoftware BigFix Quantum Risk Analyzer · CVSS 4.4 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-494, CWE-610
- [Google Chrome: Externally controlled reference in WebView in Google Chrome on on Android prior to…](https://agentprime.io/advisories/CVE-2026-79256.md)
  `CVE-2026-79256` · CVE record: Google Chrome · CVSS 8.3 High · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-610
- [Google Chrome: Externally controlled reference in QUIC in Google Chrome prior to 152.0.7977.65 allowed a…](https://agentprime.io/advisories/CVE-2026-78966.md)
  `CVE-2026-78966` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: CWE-610
- [Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows](https://agentprime.io/advisories/CVE-2026-62960.md)
  `CVE-2026-62960` · CVE record: git-for-windows git · CVSS 7.4 High · Not analysed yet · Published 21 Aug 2026 · Tags: Information disclosure, CWE-610
- [pkp pkp-lib XSLTransformer.php \_transformPHP xml external entity reference](https://agentprime.io/advisories/CVE-2026-76572.md)
  `CVE-2026-76572` · CVE record: pkp pkp-lib · CVSS 5.1 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: XML external entities (XXE), CWE-610
- [Ansible-collection-redhat-leapp: ansible-collection-redhat-leapp: information disclosure via leapp report tampering](https://agentprime.io/advisories/CVE-2026-68562.md)
  `CVE-2026-68562` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-610
- [datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema \`$ref\` (\`file://\` and \`../\` traversal), bypassing \`--no-allow-remote-refs\`](https://agentprime.io/advisories/GHSA-8359-h9fx-j6v9.md)
  `GHSA-8359-h9fx-j6v9`, `CVE-2026-55389`, `PYSEC-2026-3558` · PyPI `datamodel-code-generator`: affected `<0.62.0`, fixed in `0.62.0` · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Path traversal, Information disclosure, CWE-610
- [datamodel-code-generator vulnerable to arbitrary local file read via XSD \`schemaLocation\` (\`xs:include\`/\`xs:import\`) path traversal, with no remote-ref gate](https://agentprime.io/advisories/GHSA-442q-2j6p-642g.md)
  `GHSA-442q-2j6p-642g`, `CVE-2026-55390`, `PYSEC-2026-3556` · PyPI `datamodel-code-generator`: affected `>=0.59.0, <0.62.0`, fixed in `0.62.0` · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Path traversal, Information disclosure, CWE-610
- [SSRF (confused deputy) in Grafana MCP Server via X-Grafana-URL header](https://agentprime.io/advisories/CVE-2026-15583.md)
  `CVE-2026-15583` · CVE record: Grafana Grafana MCP Server · CVSS 8.6 High · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-610
- [Cross-Tenant Data Exfiltration in Apigee via BigQuery Confused Deputy](https://agentprime.io/advisories/CVE-2026-12879.md)
  `CVE-2026-12879` · CVE record: Google Cloud Apigee · CVSS 5.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-441, CWE-610
- [Jenkins OWASP ZAP Plugin: Builds executed on the Jenkins controller can lead to RCE](https://agentprime.io/advisories/GHSA-5qh3-hxx9-w26p.md)
  `GHSA-5qh3-hxx9-w26p`, `CVE-2026-57301` · Maven `org.jenkins-ci.plugins:zapper`: affected `<=1.0.7`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 24 Jun 2026 · Tags: CWE-610
- [zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 XML Parser import xml external entity reference](https://agentprime.io/advisories/CVE-2026-12788.md)
  `CVE-2026-12788` · CVE record: zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: XML external entities (XXE), CWE-610
- [Apache Camel K: Kubernetes namespace authorized users can create a Build resource](https://agentprime.io/advisories/GHSA-q8ch-jx67-q52x.md)
  `GHSA-q8ch-jx67-q52x`, `CVE-2026-45760`, `GO-2026-5573` · Go `github.com/apache/camel-k/v2`: affected `<2.8.1 || >=2.9.0, <2.9.2 || >=2.10.0, <2.10.1`, fixed in `2.8.1`, `2.9.2`, `2.10.1` · CVSS 8.1 High · Not analysed yet · Published 21 May 2026 · Tags: Broken access control, CWE-610
- [Server-side request forgery in tenable Terrascan](https://agentprime.io/advisories/CVE-2026-47358.md)
  `CVE-2026-47358` · CVE record: tenable Terrascan · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-610
- [Server-side request forgery in tenable Terrascan](https://agentprime.io/advisories/CVE-2026-47357.md)
  `CVE-2026-47357` · CVE record: tenable Terrascan · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-610
- [Microsoft Partner Center Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-34327.md)
  `CVE-2026-34327` · CVE record: Microsoft Microsoft Partner Center · CVSS 8.2 High · Not analysed yet · Published 7 May 2026 · Tags: CWE-610
- [OpenClaw: Workspace dotenv files cannot override connector endpoint hosts](https://agentprime.io/advisories/GHSA-55cf-xx38-4p9p.md)
  `GHSA-55cf-xx38-4p9p`, `CVE-2026-45003` · npm `openclaw`: affected `<2026.4.22`, fixed in `2026.4.22` · CVSS 4.1 Medium · Not analysed yet · Published 4 May 2026 · Tags: CWE-427, CWE-441, CWE-610
- [Local File Inclusion in the File Upload/Download Process](https://agentprime.io/advisories/CVE-2026-0522.md)
  `CVE-2026-0522` · CVE record: VertiGIS VertiGIS FM · CVSS 7.4 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-610
- [Local privilege escalation due to improper soft link handling.](https://agentprime.io/advisories/CVE-2026-28722.md)
  `CVE-2026-28722` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 7.3 High · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-610
- [Local privilege escalation due to improper soft link handling.](https://agentprime.io/advisories/CVE-2026-28721.md)
  `CVE-2026-28721` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 7.3 High · Not analysed yet · Published 5 Mar 2026 · Tags: CWE-610
- [OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files](https://agentprime.io/advisories/GHSA-45cg-2683-gfmq.md)
  `GHSA-45cg-2683-gfmq`, `CVE-2026-32008` · npm `openclaw`: affected `<2026.2.21`, fixed in `2026.2.21` · CVSS 7.1 High · Not analysed yet · Published 3 Mar 2026 · Tags: CWE-610
- [In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code.](https://agentprime.io/advisories/CVE-2025-48654.md)
  `CVE-2025-48654` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Mar 2026 · Tags: CWE-610
- [thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference](https://agentprime.io/advisories/CVE-2026-3404.md)
  `CVE-2026-3404` · CVE record: thinkgem JeeSite · CVSS 2.3 Low · Not analysed yet · Published 2 Mar 2026 · Tags: XML external entities (XXE), CWE-610
- [opencc JFlow Workflow WF_Admin_AttrFlow.java Imp_Done xml external entity reference](https://agentprime.io/advisories/CVE-2026-2536.md)
  `CVE-2026-2536` · CVE record: opencc JFlow · CVSS 5.3 Medium · Not analysed yet · Published 16 Feb 2026 · Tags: XML external entities (XXE), CWE-610
- [O2OA HTTP POST Request check xml external entity reference](https://agentprime.io/advisories/CVE-2026-2074.md)
  `CVE-2026-2074` · CVE record: O2OA · CVSS 5.3 Medium · Not analysed yet · Published 7 Feb 2026 · Tags: XML external entities (XXE), CWE-610
- [Bjskzy Zhiyou ERP com.artery.richclient.RichClientService RichClientService.class initRCForm xml external entity reference](https://agentprime.io/advisories/CVE-2026-1218.md)
  `CVE-2026-1218` · CVE record: Bjskzy Zhiyou ERP · CVSS 5.3 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: XML external entities (XXE), CWE-610
- [HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration in github.com/hashicorp/nomad](https://agentprime.io/advisories/GHSA-5mqx-rpxv-mvxj.md)
  `GHSA-5mqx-rpxv-mvxj`, `CVE-2024-6717`, `GO-2026-4278` · Go `github.com/hashicorp/nomad`: affected `<1.11.1`, fixed in `1.11.1` · CVSS 7.7 High · Not analysed yet · Published 12 Jan 2026 · Tags: CWE-610
- [beecue FastBee SIP Message ReqAbstractHandler.java getRootElement xml external entity reference](https://agentprime.io/advisories/CVE-2025-15251.md)
  `CVE-2025-15251` · CVE record: beecue FastBee · CVSS 6.3 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: XML external entities (XXE), CWE-610
- [External Control of File Name or Path in Langflow](https://agentprime.io/advisories/GHSA-f43r-cc68-gpx4.md)
  `GHSA-f43r-cc68-gpx4`, `CVE-2025-68478`, `PYSEC-2025-125` · PyPI `langflow`: affected `<1.7.1`, fixed in `1.7.1` · CVSS 7.1 High · Not analysed yet · Published 19 Dec 2025 · Tags: Path traversal, CWE-610
- [bestfeng oa_git_free WorkflowPredefineController.java updateWriteBack xml external entity reference](https://agentprime.io/advisories/CVE-2025-13209.md)
  `CVE-2025-13209` · CVE record: bestfeng oa_git_free · CVSS 5.3 Medium · Not analysed yet · Published 15 Nov 2025 · Tags: XML external entities (XXE), CWE-610
- [Jinher OA type xml external entity reference](https://agentprime.io/advisories/CVE-2025-11341.md)
  `CVE-2025-11341` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 6 Oct 2025 · Tags: XML external entities (XXE), CWE-610
- [Bjskzy Zhiyou ERP com.artery.richclient.RichClientService openForm xml external entity reference](https://agentprime.io/advisories/CVE-2025-11140.md)
  `CVE-2025-11140` · CVE record: Bjskzy Zhiyou ERP · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2025 · Tags: XML external entities (XXE), CWE-610
- [Jinher OA text xml external entity reference](https://agentprime.io/advisories/CVE-2025-11035.md)
  `CVE-2025-11035` · CVE record: Jinher OA · CVSS 5.3 Medium · Not analysed yet · Published 26 Sept 2025 · Tags: XML external entities (XXE), CWE-610
- [Jinher OA XML text xml external entity reference](https://agentprime.io/advisories/CVE-2025-10816.md)
  `CVE-2025-10816` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: XML external entities (XXE), CWE-610
- [IDOR in Patika Global Technologies' HumanSuite](https://agentprime.io/advisories/CVE-2025-8057.md)
  `CVE-2025-8057` · CVE record: Patika Global Technologies HumanSuite · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: Broken access control, CWE-610
- [Rockwell Automation ThinManager® Server-Side Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2025-9065.md)
  `CVE-2025-9065` · CVE record: Rockwell Automation ThinManager · CVSS 8.6 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-610
- [Jinher OA XML Type xml external entity reference](https://agentprime.io/advisories/CVE-2025-10092.md)
  `CVE-2025-10092` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2025 · Tags: XML external entities (XXE), CWE-610
- [Jinher OA XML Type xml external entity reference](https://agentprime.io/advisories/CVE-2025-10091.md)
  `CVE-2025-10091` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 8 Sept 2025 · Tags: XML external entities (XXE), CWE-610
- [In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused deputy.](https://agentprime.io/advisories/CVE-2024-49728.md)
  `CVE-2024-49728` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-610
- [In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy.](https://agentprime.io/advisories/CVE-2024-49722.md)
  `CVE-2024-49722` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-610
- [Local privilege escalation due to improper soft link handling.](https://agentprime.io/advisories/CVE-2025-48963.md)
  `CVE-2025-48963` · CVE record: Acronis Acronis Cyber Protect Cloud Agent · CVSS 7.3 High · Not analysed yet · Published 28 Aug 2025 · Tags: CWE-610
- [In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible bypass of user consent when opening files in shared storage due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-26417.md)
  `CVE-2025-26417` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-610
- [In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy.](https://agentprime.io/advisories/CVE-2025-0082.md)
  `CVE-2025-0082` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-610
- [Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path](https://agentprime.io/advisories/CVE-2015-10142.md)
  `CVE-2015-10142` · CVE record: Sitecore Experience Platform (XP) and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-610
- [Jinher OA XmlHttp.aspx xml external entity reference](https://agentprime.io/advisories/CVE-2025-7824.md)
  `CVE-2025-7824` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 19 Jul 2025 · Tags: XML external entities (XXE), CWE-610
- [Jinher OA ProjectScheduleDelete.aspx xml external entity reference](https://agentprime.io/advisories/CVE-2025-7823.md)
  `CVE-2025-7823` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 19 Jul 2025 · Tags: XML external entities (XXE), CWE-610
- [Jinher OA DelTemp.aspx xml external entity reference](https://agentprime.io/advisories/CVE-2025-7523.md)
  `CVE-2025-7523` · CVE record: Jinher OA · CVSS 6.9 Medium · Not analysed yet · Published 13 Jul 2025 · Tags: XML external entities (XXE), CWE-610
- [Fengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference](https://agentprime.io/advisories/CVE-2025-5877.md)
  `CVE-2025-5877` · CVE record: Fengoffice Feng Office · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2025 · Tags: XML external entities (XXE), CWE-610
- [CWE-610: Externally Controlled Reference to a Resource in Another Sphere vulnerability exists that could cause a loss of confidentiality when an unauthenticated attacker manipulates controller’s webs…](https://agentprime.io/advisories/CVE-2025-2875.md)
  `CVE-2025-2875` · CVE record: Schneider Electric Modicon Controllers M241 / M251 and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 May 2025 · Tags: CWE-610
- [Symlink Following in Netskope Client Postinstall Script](https://agentprime.io/advisories/CVE-2024-13177.md)
  `CVE-2024-13177` · CVE record: Netskope Netskope Client · CVSS 5.2 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-610
- [zhangyanbo2007 youkefu XML Document CallCenterRouterController.java xml external entity reference](https://agentprime.io/advisories/CVE-2025-3241.md)
  `CVE-2025-3241` · CVE record: zhangyanbo2007 youkefu · CVSS 5.3 Medium · Not analysed yet · Published 4 Apr 2025 · Tags: XML external entities (XXE), CWE-610
- [crmeb_java WeChatMessageController.java webHook xml external entity reference](https://agentprime.io/advisories/CVE-2025-2365.md)
  `CVE-2025-2365` · CVE record: crmeb_java · CVSS 5.3 Medium · Not analysed yet · Published 17 Mar 2025 · Tags: XML external entities (XXE), CWE-610
- [ywoa WXCallBack Interface XMLParse.java extract xml external entity reference](https://agentprime.io/advisories/CVE-2025-1225.md)
  `CVE-2025-1225` · CVE record: ywoa · CVSS 5.3 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: XML external entities (XXE), CWE-610
- [A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the \`Host\` header points to an arbitr…](https://agentprime.io/advisories/CVE-2022-23439.md)
  `CVE-2022-23439` · CVE record: Fortinet FortiTester and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 22 Jan 2025 · Tags: CWE-610
- [Account Takeover in NamelessMC](https://agentprime.io/advisories/CVE-2025-22144.md)
  `CVE-2025-22144` · CVE record: NamelessMC Nameless · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jan 2025 · Tags: CWE-610

Older: <https://agentprime.io/advisories/tag/cwe-610.md?cursor=WyIyMDI1LTAxLTEzVDE5OjQ5OjAzLjg4NzAwMFoiLCJDVkUtMjAyNS0yMjE0NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-610>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-610/>. Everything for agents: <https://agentprime.io/llms.txt>.