# Path traversal.

File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [extract-zip allows arbitrary file writes through symlink archive entries](https://agentprime.io/advisories/GHSA-7pqw-9j4j-h8q3.md)
  `GHSA-7pqw-9j4j-h8q3`, `CVE-2026-19693` · npm `extract-zip`: affected `<=2.0.1`, no fixed version yet · CVSS 8.1 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Path traversal in Dell ObjectScale](https://agentprime.io/advisories/CVE-2026-56089.md)
  `CVE-2026-56089` · CVE record: Dell ObjectScale · CVSS 3.3 Low · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Path traversal in Dell ObjectScale](https://agentprime.io/advisories/CVE-2026-59909.md)
  `CVE-2026-59909` · CVE record: Dell ObjectScale · CVSS 7.1 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller](https://agentprime.io/advisories/CVE-2026-16137.md)
  `CVE-2026-16137` · CVE record: Progress ShareFile Storage Zones Controller · CVSS 7.2 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal, Unrestricted file upload
- [Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution](https://agentprime.io/advisories/CVE-2026-16139.md)
  `CVE-2026-16139` · CVE record: Progress ShareFile Storage Zones Controller · CVSS 7.2 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal, CWE-20
- [openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the \_is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin config directo...](https://agentprime.io/advisories/GHSA-8jpj-w975-rwv5.md)
  `GHSA-8jpj-w975-rwv5`, `CVE-2026-74884`, `PYSEC-2026-3761` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 8.7 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [SiYuan kernel Path Traversal via database_clean MCP tool](https://agentprime.io/advisories/CVE-2026-74798.md)
  `CVE-2026-74798` · CVE record: siyuan-note siyuan · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint](https://agentprime.io/advisories/CVE-2026-67918.md)
  `CVE-2026-67918` · CVE record · CVSS 7.5 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code.](https://agentprime.io/advisories/CVE-2026-50776.md)
  `CVE-2026-50776` · CVE record · CVSS 7.5 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.](https://agentprime.io/advisories/CVE-2026-42162.md)
  `CVE-2026-42162` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Kirki <= 6.1.1 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'data' Parameter](https://agentprime.io/advisories/CVE-2026-17604.md)
  `CVE-2026-17604` · CVE record: themeum Kirki – Freeform Page Builder, Website Builder & Customizer · CVSS 4.9 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Path traversal
- [WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect](https://agentprime.io/advisories/CVE-2026-19725.md)
  `CVE-2026-19725` · CVE record: Unknown WPvivid — Backup, Migration & Staging · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Aug 2026 · Tags: Path traversal
- [StoreEngine <= 2.1.1 - Authenticated (Vendor+) Arbitrary File Read via Path Traversal in Downloadable File URL](https://agentprime.io/advisories/CVE-2026-15056.md)
  `CVE-2026-15056` · CVE record: kodezen StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More · CVSS 6.5 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Path traversal
- [ProSolution WP Client <= 2.0.8 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters](https://agentprime.io/advisories/CVE-2026-14524.md)
  `CVE-2026-14524` · CVE record: prosolution ProSolution WP Client · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Aug 2026 · Tags: Path traversal
- [Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora](https://agentprime.io/advisories/CVE-2026-74764.md)
  `CVE-2026-74764` · CVE record: pandora-analysis pandora · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Aug 2026 · Tags: Path traversal
- [Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter](https://agentprime.io/advisories/CVE-2026-18855.md)
  `CVE-2026-18855` · CVE record: jackdewey Link Library · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Aug 2026 · Tags: Path traversal
- [RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Deletion via 'rsmfcf7_session' and 'file_name' Parameters](https://agentprime.io/advisories/CVE-2026-14484.md)
  `CVE-2026-14484` · CVE record: pietror91 RapiSafe – Secure Multi File Upload for Contact Form 7 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Aug 2026 · Tags: Path traversal
- [Microsoft Defender Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69414.md)
  `CVE-2026-69414` · CVE record: Microsoft Microsoft Malware Protection Engine · CVSS 7.8 High · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal, Privilege escalation
- [Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpoints](https://agentprime.io/advisories/GHSA-76pc-mqxp-3rq5.md)
  `GHSA-76pc-mqxp-3rq5`, `CVE-2026-55156` · npm `@ooples/token-optimizer-mcp`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-19909.md)
  `CVE-2026-19909` · CVE record: PAX Technology Q80 · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [Airwall - Arbitrary file read](https://agentprime.io/advisories/CVE-2026-34492.md)
  `CVE-2026-34492` · CVE record: Johnson Controls Airwall · CVSS 7.0 High · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [IBM Db2 Mirror for i is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-18554.md)
  `CVE-2026-18554` · CVE record: IBM Db2 Mirror for i · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [IBM Db2 Mirror for i is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-18178.md)
  `CVE-2026-18178` · CVE record: IBM Db2 Mirror for i · CVSS 5.4 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [IBM Db2 Mirror for i is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-17184.md)
  `CVE-2026-17184` · CVE record: IBM Db2 Mirror for i · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [IBM Db2 Mirror for i is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-17181.md)
  `CVE-2026-17181` · CVE record: IBM Db2 Mirror for i · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [IBM Db2 Mirror for i is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-17173.md)
  `CVE-2026-17173` · CVE record: IBM Db2 Mirror for i · CVSS 6.5 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [IBM Db2 Mirror for i is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-17081.md)
  `CVE-2026-17081` · CVE record: IBM Db2 Mirror for i · CVSS 8.2 High · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [IBM Db2 Mirror for i is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-16915.md)
  `CVE-2026-16915` · CVE record: IBM Db2 Mirror for i · CVSS 7.5 High · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad](https://agentprime.io/advisories/CVE-2026-57472.md)
  `CVE-2026-57472` · CVE record: KUNBUS RevPiPyLoad · CVSS 6.9 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad](https://agentprime.io/advisories/CVE-2026-57471.md)
  `CVE-2026-57471` · CVE record: KUNBUS RevPiPyLoad · CVSS 6.8 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [Incomplete protection against CVE-2025-11226](https://agentprime.io/advisories/CVE-2026-19880.md)
  `CVE-2026-19880` · CVE record: QOS.CH Sarl Logback-classic · CVSS 6.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversal](https://agentprime.io/advisories/CVE-2026-19829.md)
  `CVE-2026-19829` · CVE record: 648540858 wvp-GB28181-pro · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [648540858 wvp-GB28181-pro Snapshot Endpoint PlayController.java path traversal](https://agentprime.io/advisories/CVE-2026-19828.md)
  `CVE-2026-19828` · CVE record: 648540858 wvp-GB28181-pro · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversal](https://agentprime.io/advisories/CVE-2026-19827.md)
  `CVE-2026-19827` · CVE record: alldatacenter alldata · CVSS 6.9 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [Grav 2.0.11 Path Traversal via Backup Profile Configuration](https://agentprime.io/advisories/CVE-2026-72820.md)
  `CVE-2026-72820` · CVE record: getgrav grav · CVSS 6.9 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal](https://agentprime.io/advisories/CVE-2026-19763.md)
  `CVE-2026-19763` · CVE record: DTStack Taier · CVSS 5.1 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal](https://agentprime.io/advisories/CVE-2026-19762.md)
  `CVE-2026-19762` · CVE record: DTStack Taier · CVSS 6.9 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Path traversal
- [DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal](https://agentprime.io/advisories/CVE-2026-19761.md)
  `CVE-2026-19761` · CVE record: DTStack Taier · CVSS 5.1 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal](https://agentprime.io/advisories/CVE-2026-19758.md)
  `CVE-2026-19758` · CVE record: dromara lamp-cloud · CVSS 6.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal](https://agentprime.io/advisories/CVE-2026-19757.md)
  `CVE-2026-19757` · CVE record: Dromara lamp-cloud · CVSS 6.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal](https://agentprime.io/advisories/CVE-2026-19756.md)
  `CVE-2026-19756` · CVE record: Dromara lamp-cloud · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [Budibase before 3.40.0 Arbitrary File Write via Path Traversal](https://agentprime.io/advisories/CVE-2026-72850.md)
  `CVE-2026-72850` · CVE record: budibase server · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [OpenWrt luci-app-lxc ACL Inconsistency Authentication Bypass](https://agentprime.io/advisories/CVE-2026-72842.md)
  `CVE-2026-72842` · CVE record: openwrt luci · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [luci-app-openvpn Path Traversal RCE via instance_name2](https://agentprime.io/advisories/CVE-2026-72841.md)
  `CVE-2026-72841` · CVE record: openwrt luci · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API](https://agentprime.io/advisories/CVE-2026-73659.md)
  `CVE-2026-73659` · CVE record: triggerdotdev trigger.dev · CVSS 8.1 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [Trigger.dev: Cross-tenant object store read and write via URL path traversal](https://agentprime.io/advisories/CVE-2026-73658.md)
  `CVE-2026-73658` · CVE record: triggerdotdev trigger.dev · CVSS 8.2 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal, Broken access control, CWE-20
- [Trigger.dev: Cross-tenant payload poisoning via packet write + replay](https://agentprime.io/advisories/CVE-2026-73657.md)
  `CVE-2026-73657` · CVE record: triggerdotdev trigger.dev · CVSS 4.2 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal, Broken access control, CWE-345
- [IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution](https://agentprime.io/advisories/CVE-2026-17482.md)
  `CVE-2026-17482` · CVE record: IBM Documentation Offline · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution](https://agentprime.io/advisories/CVE-2026-17473.md)
  `CVE-2026-17473` · CVE record: IBM Documentation Offline · CVSS 7.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager](https://agentprime.io/advisories/CVE-2026-17088.md)
  `CVE-2026-17088` · CVE record: IBM i · CVSS 4.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager](https://agentprime.io/advisories/CVE-2026-17071.md)
  `CVE-2026-17071` · CVE record: IBM i · CVSS 2.7 Low · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager](https://agentprime.io/advisories/CVE-2026-17043.md)
  `CVE-2026-17043` · CVE record: IBM i · CVSS 3.8 Low · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [IBM i is Affected By An Improper Validation Vulnerability in PASE \[\]](https://agentprime.io/advisories/CVE-2026-16987.md)
  `CVE-2026-16987` · CVE record: IBM i · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [IBM i is Affected By Multiple SQL Vulnerabilities \[, \]](https://agentprime.io/advisories/CVE-2026-16908.md)
  `CVE-2026-16908` · CVE record: IBM i · CVSS 8.5 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service](https://agentprime.io/advisories/CVE-2026-16898.md)
  `CVE-2026-16898` · CVE record: IBM i · CVSS 7.8 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources](https://agentprime.io/advisories/CVE-2026-72677.md)
  `CVE-2026-72677` · CVE record: Elastic Kibana · CVSS 7.3 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [CyberPanel < 3.0.0 Path Traversal File Read via cloudAPI ReadReport](https://agentprime.io/advisories/CVE-2026-67613.md)
  `CVE-2026-67613` · CVE record: usmannasir cyberpanel · CVSS 6.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catal…](https://agentprime.io/advisories/CVE-2026-13048.md)
  `CVE-2026-13048` · CVE record · CVSS 8.2 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal, Code injection
- [Path traversal in Zimbra Collaboration](https://agentprime.io/advisories/CVE-2026-73573.md)
  `CVE-2026-73573` · CVE record: Zimbra Collaboration · CVSS 3.1 Low · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal
- [Symlink following in Lenovo Commercial Vantage and others](https://agentprime.io/advisories/CVE-2026-15994.md)
  `CVE-2026-15994` · CVE record: Lenovo Commercial Vantage and 1 more · CVSS 7.3 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/tag/path-traversal.md>
Older: <https://agentprime.io/advisories/tag/path-traversal.md?cursor=WyIyMDI2LTA4LTEzVDE0OjUzOjA1LjA1NjAwMFoiLCJDVkUtMjAyNi0xNTk5NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=path-traversal&cursor=WyIyMDI2LTA4LTE3VDE2OjM3OjM0LjAwMDAwMFoiLCJHSFNBLTgzOTQtNmY4ci13aHhnIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/path-traversal/?cursor=WyIyMDI2LTA4LTE3VDE2OjM3OjM0LjAwMDAwMFoiLCJHSFNBLTgzOTQtNmY4ci13aHhnIl0>. Everything for agents: <https://agentprime.io/llms.txt>.