# Path traversal.

File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Cisco Crosswork Security Hardening Release: August 2026](https://agentprime.io/advisories/CVE-2026-20358.md)
  `CVE-2026-20358` · CVE record: Cisco Cisco Crosswork Planning · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager](https://agentprime.io/advisories/CVE-2026-48024.md)
  `CVE-2026-48024` · CVE record: wazuh wazuh · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager](https://agentprime.io/advisories/CVE-2026-48162.md)
  `CVE-2026-48162` · CVE record: wazuh wazuh · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()](https://agentprime.io/advisories/CVE-2026-46343.md)
  `CVE-2026-46343` · CVE record: wazuh wazuh · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()](https://agentprime.io/advisories/GHSA-w672-239g-c3gr.md)
  `GHSA-w672-239g-c3gr` · PyPI `gitpython`: affected `<=3.1.57`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython](https://agentprime.io/advisories/GHSA-3vrx-526r-64rm.md)
  `GHSA-3vrx-526r-64rm` · PyPI `gitpython`: affected `<=3.1.57`, no fixed version yet · CVSS 8.2 High · Withdrawn · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [tarfile extraction filter bypass allows creation of directories outside the destination](https://agentprime.io/advisories/CVE-2026-19672.md)
  `CVE-2026-19672` · CVE record: Python Software Foundation CPython · CVSS 6.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore](https://agentprime.io/advisories/CVE-2026-76614.md)
  `CVE-2026-76614` · CVE record: openemr openemr · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Symlink following in Dell Command Update (DCU)](https://agentprime.io/advisories/CVE-2026-56796.md)
  `CVE-2026-56796` · CVE record: Dell Dell Command Update (DCU) · CVSS 6.6 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution](https://agentprime.io/advisories/CVE-2026-53451.md)
  `CVE-2026-53451` · CVE record: sgoudelis ground-station · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal, Code injection
- [Ground Station: Unauthenticated out-of-containment file read via \`sigmfplayback\` \`recordingPath\`](https://agentprime.io/advisories/CVE-2026-53452.md)
  `CVE-2026-53452` · CVE record: sgoudelis ground-station · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal, Information disclosure
- [SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write](https://agentprime.io/advisories/CVE-2026-47187.md)
  `CVE-2026-47187` · CVE record: libfuse sshfs · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-15061.md)
  `CVE-2026-15061` · CVE record: IBM AIX and 1 more · CVSS 8.2 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export](https://agentprime.io/advisories/CVE-2026-76210.md)
  `CVE-2026-76210` · CVE record: thorsten phpMyFAQ · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Path traversal in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-70424.md)
  `CVE-2026-70424` · CVE record: Dell OpenManage Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key](https://agentprime.io/advisories/CVE-2026-18051.md)
  `CVE-2026-18051` · CVE record: Unknown W3 Total Cache · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal](https://agentprime.io/advisories/CVE-2026-16616.md)
  `CVE-2026-16616` · CVE record: Unknown Simple File List · CVSS 8.6 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '\_wp_attached_file' Meta](https://agentprime.io/advisories/CVE-2026-19942.md)
  `CVE-2026-19942` · CVE record: wpfeedback Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback · CVSS 8.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal
- [4gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Board Export](https://agentprime.io/advisories/CVE-2026-50186.md)
  `CVE-2026-50186` · CVE record: RARgames 4gaBoards · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Streambert: Arbitrary Directory Creation and File Manipulation via Backup Handler](https://agentprime.io/advisories/CVE-2026-52875.md)
  `CVE-2026-52875` · CVE record: truelockmc streambert · CVSS 8.4 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Streambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol](https://agentprime.io/advisories/CVE-2026-52872.md)
  `CVE-2026-52872` · CVE record: truelockmc streambert · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Confidential Containers Guest Components image-rs: zip-slip-class arbitrary file write via absolute entry path in hardlink fallback](https://agentprime.io/advisories/CVE-2026-47699.md)
  `CVE-2026-47699` · CVE record: confidential-containers guest-components · CVSS 6.4 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)](https://agentprime.io/advisories/GHSA-rh9c-rqvg-f7pr.md)
  `GHSA-rh9c-rqvg-f7pr`, `CVE-2026-73974`, `PYSEC-2026-3682` · PyPI `linuxfabrik-lib`: affected `<6.1.0`, fixed in `6.1.0` · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal, Privilege escalation
- [moby/go-archive: Crafted tar archive can write outside the extraction directory](https://agentprime.io/advisories/GHSA-hfg8-hc9c-6c3h.md)
  `GHSA-hfg8-hc9c-6c3h`, `BIT-docker-cli-2026-17106`, `CVE-2026-17106`, `GO-2026-6253` · Go `github.com/moby/go-archive`: affected `<0.3.0`, fixed in `0.3.0` · CVSS 7.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)](https://agentprime.io/advisories/CVE-2026-73973.md)
  `CVE-2026-73973` · CVE record: Linuxfabrik monitoring-plugins · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal, Privilege escalation
- [Blueprint Studio terminal command working directory not bounded to config directory](https://agentprime.io/advisories/CVE-2026-53457.md)
  `CVE-2026-53457` · CVE record: ha-china blueprint-studio · CVSS 5.1 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall](https://agentprime.io/advisories/GHSA-59xm-4m8c-g3xj.md)
  `GHSA-59xm-4m8c-g3xj`, `CVE-2026-55224`, `PKSA-56hm-hvjp-d16p` · Packagist `mineadmin/mineadmin`: affected `<3.2.0-alpha.2`, fixed in `3.2.0-alpha.2` · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Symlink following in Google Chrome](https://agentprime.io/advisories/CVE-2026-76037.md)
  `CVE-2026-76037` · CVE record: Google Chrome · CVSS 8.4 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Path traversal in NVIDIA Triton Inference Server](https://agentprime.io/advisories/CVE-2026-47630.md)
  `CVE-2026-47630` · CVE record: NVIDIA Triton Inference Server · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Path traversal in NVIDIA Triton Inference Server](https://agentprime.io/advisories/CVE-2026-47627.md)
  `CVE-2026-47627` · CVE record: NVIDIA Triton Inference Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Path traversal in NVIDIA Triton Inference Server](https://agentprime.io/advisories/CVE-2026-47606.md)
  `CVE-2026-47606` · CVE record: NVIDIA Triton Inference Server · CVSS 6.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads](https://agentprime.io/advisories/GHSA-8j49-mmcx-4mp5.md)
  `GHSA-8j49-mmcx-4mp5`, `CVE-2026-68922`, `PYSEC-2026-3689` · PyPI `mobsf`: affected `<4.5.1`, fixed in `4.5.1` · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello](https://agentprime.io/advisories/CVE-2026-74044.md)
  `CVE-2026-74044` · CVE record: Wazuh wazuh-manager · CVSS 7.0 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment](https://agentprime.io/advisories/CVE-2026-74038.md)
  `CVE-2026-74038` · CVE record: Wazuh wazuh-manager · CVSS 7.0 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write](https://agentprime.io/advisories/GHSA-8rc5-4fr6-64pw.md)
  `GHSA-8rc5-4fr6-64pw`, `CVE-2026-63328`, `GO-2026-6250` · Go `github.com/aquasecurity/trivy`: affected `<0.72.0`, fixed in `0.72.0` · CVSS 6.8 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [@rhinostone/swig: arbitrary local file read via include/extends path traversal](https://agentprime.io/advisories/GHSA-2mf3-mr2r-r4vf.md)
  `GHSA-2mf3-mr2r-r4vf` · npm `@rhinostone/swig` and 4 more: affected `<2.7.1`, fixed in `2.7.1` · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability](https://agentprime.io/advisories/CVE-2026-73383.md)
  `CVE-2026-73383` · CVE record: WebAppick CTX Feed · CVSS 4.9 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability](https://agentprime.io/advisories/CVE-2026-73181.md)
  `CVE-2026-73181` · CVE record: ThemeComplete Extra Product Options & Add-Ons for WooCommerce · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [DataEase has a Path Traversal Vulnerability](https://agentprime.io/advisories/CVE-2026-45532.md)
  `CVE-2026-45532` · CVE record: dataease dataease · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in \`plugin-asset-map.php\` Static Asset Server (\`index.php\`)](https://agentprime.io/advisories/GHSA-2rhw-8953-48q3.md)
  `GHSA-2rhw-8953-48q3` · Packagist `getgrav/grav`: affected `*`, no fixed version yet · CVSS 5.9 Medium · Withdrawn · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751](https://agentprime.io/advisories/CVE-2026-18751.md)
  `CVE-2026-18751` · CVE record: Citrix WorkSpace App · CVSS 5.2 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [Path Traversal in AKIN Software's Wolvox9 ERP](https://agentprime.io/advisories/CVE-2026-15585.md)
  `CVE-2026-15585` · CVE record: AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [ArcadeDB before 26.8.1 Path Traversal via create/drop database](https://agentprime.io/advisories/CVE-2026-75855.md)
  `CVE-2026-75855` · CVE record: ArcadeData arcadedb · CVSS 8.4 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV](https://agentprime.io/advisories/CVE-2026-75842.md)
  `CVE-2026-75842` · CVE record: ArcadeData arcadedb · CVSS 8.3 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [grav-plugin-api before 1.0.15 Path Traversal via batchCopy](https://agentprime.io/advisories/CVE-2026-75830.md)
  `CVE-2026-75830` · CVE record: getgrav grav · CVSS 7.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir(), and org.springframework.util.FileSystemUtils.copy…](https://agentprime.io/advisories/CVE-2026-67920.md)
  `CVE-2026-67920` · CVE record · CVSS 8.8 High · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [An arbitrary file write/directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to create or overwrite files anywhere on the filesystem subject to the permissions of the w…](https://agentprime.io/advisories/CVE-2026-52610.md)
  `CVE-2026-52610` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [A directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the target_format parame…](https://agentprime.io/advisories/CVE-2026-52607.md)
  `CVE-2026-52607` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Path traversal
- [chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots](https://agentprime.io/advisories/GHSA-8qf9-62x2-82pp.md)
  `GHSA-8qf9-62x2-82pp`, `CVE-2026-53766` · npm `chrome-devtools-mcp`: affected `>=0.24.0, <1.1.0`, fixed in `1.1.0` · CVSS 6.1 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset](https://agentprime.io/advisories/CVE-2026-54336.md)
  `CVE-2026-54336` · CVE record: jumpserver jumpserver · CVSS 5.4 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php](https://agentprime.io/advisories/CVE-2026-40506.md)
  `CVE-2026-40506` · CVE record: openemr openemr · CVSS 7.0 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [SWE-agent Trajectory Inspector Path Traversal File Disclosure](https://agentprime.io/advisories/CVE-2026-75482.md)
  `CVE-2026-75482` · CVE record: SWE-agent SWE-agent · CVSS 8.7 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Evidently UI Path Traversal via Dataset Materialization Filename](https://agentprime.io/advisories/CVE-2026-75111.md)
  `CVE-2026-75111` · CVE record: evidentlyai evidently · CVSS 8.7 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Hugging Face Transformers Path Traversal via Checkpoint Index](https://agentprime.io/advisories/CVE-2026-75104.md)
  `CVE-2026-75104` · CVE record: huggingface transformers · CVSS 6.8 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Packer vulnerable to arbitrary file write via crafted plugin archive during installation](https://agentprime.io/advisories/CVE-2026-19589.md)
  `CVE-2026-19589` · CVE record: HashiCorp Packer · CVSS 7.1 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction](https://agentprime.io/advisories/CVE-2026-57233.md)
  `CVE-2026-57233` · CVE record: notepad-plus-plus notepad-plus-plus · CVSS 8.1 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Notepad++: session.xml backupFilePath starts_with Bypass](https://agentprime.io/advisories/CVE-2026-52886.md)
  `CVE-2026-52886` · CVE record: notepad-plus-plus notepad-plus-plus · CVSS 5.1 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling](https://agentprime.io/advisories/GHSA-92hr-gmr6-h8cp.md)
  `GHSA-92hr-gmr6-h8cp` · npm `ep_etherpad-lite`: affected `<3.3.0`, fixed in `3.3.0` · No CVSS score · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal, Information disclosure, Weak cryptography or TLS, CWE-208
- [uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability](https://agentprime.io/advisories/GHSA-m6jg-wr9m-cg2f.md)
  `GHSA-m6jg-wr9m-cg2f`, `CVE-2026-55062`, `GO-2026-6247` · Go `gitlab.com/uniget-org/cli`: affected `<0.27.6`, fixed in `0.27.6` · CVSS 8.4 High · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal
- [Terragrunt: Arbitrary File Deletion via Malicious Module Manifest](https://agentprime.io/advisories/GHSA-8394-6f8r-whxg.md)
  `GHSA-8394-6f8r-whxg`, `CVE-2026-45099`, `GO-2026-6241` · Go `github.com/gruntwork-io/terragrunt`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 6.9 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Path traversal, CWE-20

Newest: <https://agentprime.io/advisories/tag/path-traversal.md>
Older: <https://agentprime.io/advisories/tag/path-traversal.md?cursor=WyIyMDI2LTA4LTE3VDE2OjM3OjM0LjAwMDAwMFoiLCJHSFNBLTgzOTQtNmY4ci13aHhnIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=path-traversal&cursor=WyIyMDI2LTA4LTE5VDE2OjE5OjM3LjIwNjAwMFoiLCJDVkUtMjAyNi00OTQ0MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/path-traversal/?cursor=WyIyMDI2LTA4LTE5VDE2OjE5OjM3LjIwNjAwMFoiLCJDVkUtMjAyNi00OTQ0MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.