CWE-693.

Windows Event Logging Service Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• CWE-693

mosaxiv clawlet exec Safety Guard tool_exec.go guardExecCommand protection mechanism

• mosaxiv clawlet
• CWE-693

lamaalrajih kicad-mcp path_validator.py protection mechanism

• lamaalrajih kicad-mcp
• CWE-693

SafeInstall agent guard shell parsing can miss raw package execution

• CWE-178
• CWE-693

<0.10.2 · fixed in 0.10.2

Duplicate Advisory: PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow

• CWE-693

<=1.6.77 · no fixed version yet

Duplicate Advisory: PraisonAI: Prompt-injection defense blocks only when 3+ detector families fire simultaneously; realistic single-vector injections pass through unblocked

• CWE-693

<=4.6.77 · no fixed version yet

SiYuan: Incomplete IsSensitivePath denylist: globalCopyFiles reads home-dir credential dotfiles into the workspace

• siyuan
• CWE-693

Prisma Access Agent: Multiple DLP Policy Bypass Vulnerabilities on Windows

• Palo Alto Networks Prisma Access Agent
• CWE-693

oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)

• Path traversal
• Server-side request forgery (SSRF)

>=1.13.2, <1.18.1 · fixed in 1.18.1

netfoil has a domain name filter bypass via multiple questions

• CWE-436
• CWE-693

<0.3.0 · fixed in 0.3.0

uutils coreutils: cp/install/mv/ln --suffix alone does not enable backup mode (silent data loss vs GNU)

• CWE-440
• CWE-693

<0.6.0 · fixed in 0.6.0

rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection

• Path traversal
• CWE-693

<0.6.0 · fixed in 0.6.0

rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)

• Path traversal
• CWE-693

<0.7.0 · fixed in 0.7.0

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardles...

• CWE-693

<0.1.12 · fixed in 0.1.12

NousResearch hermes-agent server.py shell.exec protection mechanism

• NousResearch hermes-agent
• CWE-693

Cloudflare Universal SSL automatically managed CAA RRset supersedes customer-configured CAA records

• Cloudflare Universal SSL
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`

• Broken access control
• Code injection

<3.27.0 · fixed in 3.27.0

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Protection mechanism failure in Google Chrome

• Google Chrome
• CWE-693

Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterface`

• Broken access control
• CWE-693

<3.27.0 · fixed in 3.27.0

Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filters

• Broken access control
• CWE-693

<3.27.0 · fixed in 3.27.0

Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys

• Broken access control
• CWE-693

<3.27.0 · fixed in 3.27.0

Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

• CWE-693

<3.27.0 · fixed in 3.27.0

Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape

• Privilege escalation
• Broken access control

<1.24.0 · fixed in 1.24.0

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

• Privilege escalation
• Broken access control

<1.24.0 · fixed in 1.24.0

OpenAM Authenticated RCE via Groovy Sandbox Escape

• CWE-693

<16.1.1 · fixed in 16.1.1

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

• CWE-184
• CWE-693

<4.6.40 · fixed in 4.6.40

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

• CWE-693

<1.5.90 · fixed in 1.5.90

PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

• CWE-657
• CWE-693

<1.5.115 · fixed in 1.5.115

Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications

• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8
• CWE-693

7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

• 7-Zip
• CWE-693

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

• CWE-346
• CWE-693

<10.34.2 || >=11.0.0, <11.5.3 · fixed in 10.34.2, 11.5.3

nono-py has proxy-only network fallback bypass on older Linux kernels

• CWE-693

>=0.9.0, <0.10.1 · fixed in 0.10.1

Markdown image rendering bypass in AI bot tool result posts in Mattermost

• Mattermost
• CWE-693

Warp: Env-var prefixes can lead to denylisted command autoexecution

• warp
• CWE-180
• CWE-693

Jenkins Script Security Plugin has a script security bypass vulnerability

• Other injection
• Code injection

<1402.1405.vc96e74964250 · fixed in 1402.1405.vc96e74964250

Jenkins Script Security Plugin sandbox bypass vulnerability

• CWE-693

<1402.1405.vc96e74964250 · fixed in 1402.1405.vc96e74964250

Traefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails

• CWE-636
• CWE-693

>=3.7.0-ea.1, <3.7.5 · fixed in 3.7.5

OpenClaw: Linux and macOS exec allowlists skipped configured argument patterns

• Broken access control
• CWE-693

<2026.5.12 · fixed in 2026.5.12

OpenClaw: Skill-command dispatch could skip before-tool-call hooks

• CWE-693

<2026.5.6 · fixed in 2026.5.6

PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

• Privilege escalation
• Information disclosure

>=4.5.110, <4.6.61 · fixed in 4.6.61

npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining

• Command injection
• Broken access control

>=1.5.1, <1.7.2 · fixed in 1.7.2