# Path traversal.

File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Whistle vulnerable to path traversal](https://agentprime.io/advisories/GHSA-3vfr-4gwf-qxfp.md)
  `GHSA-3vfr-4gwf-qxfp`, `CVE-2026-55629` · npm `whistle`: affected `<2.10.3`, fixed in `2.10.3` · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement](https://agentprime.io/advisories/GHSA-w5q8-6jpp-4246.md)
  `GHSA-w5q8-6jpp-4246` · PyPI `nltk`: affected `<=3.10.2`, no fixed version yet · CVSS 5.9 Medium · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: NLTK: Corpus Reader Sandbox Bypass](https://agentprime.io/advisories/GHSA-rcw8-9qrw-27m2.md)
  `GHSA-rcw8-9qrw-27m2` · PyPI `nltk`: affected `<=3.10.2`, no fixed version yet · CVSS 8.2 High · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts](https://agentprime.io/advisories/GHSA-mcj4-mphf-j9ff.md)
  `GHSA-mcj4-mphf-j9ff`, `CVE-2026-55092`, `GO-2026-6294` · Go `github.com/aquasecurity/trivy`: affected `<0.71.1`, fixed in `0.71.1` · CVSS 7.0 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [phpMyFAQ has Potential Authenticated Path Traversal in PDF Export](https://agentprime.io/advisories/GHSA-88g4-74f3-63x9.md)
  `GHSA-88g4-74f3-63x9`, `CVE-2026-57961`, `PKSA-wjc4-72dv-h8tm`, `PKSA-wqvs-f8jk-pt53` · Packagist `phpmyfaq/phpmyfaq` and 1 more: affected `>=4.0.0-alpha, <4.1.5`, fixed in `4.1.5` · CVSS 5.1 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [browse-mcp has an arbitrary file write via unconfined download and state paths](https://agentprime.io/advisories/GHSA-m9mq-7m7q-xc6p.md)
  `GHSA-m9mq-7m7q-xc6p`, `CVE-2026-55557` · npm `browse-mcp`: affected `<0.8.2`, fixed in `0.8.2` · CVSS 8.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [CVE-2026-19913](https://agentprime.io/advisories/CVE-2026-19913.md)
  `CVE-2026-19913` · CVE record: Kaltura Kaltura HTML5 Video Player, html5lib library · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal, CWE-20
- [CVE-2026-19912](https://agentprime.io/advisories/CVE-2026-19912.md)
  `CVE-2026-19912` · CVE record: Kaltura Kaltura HTML5 Video Player, html5 library · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal, CWE-20
- [Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files](https://agentprime.io/advisories/GHSA-vfp3-v2gw-7wfq.md)
  `GHSA-vfp3-v2gw-7wfq`, `CVE-2026-55677`, `GO-2026-6293` · Go `github.com/labstack/echo` and 2 more: affected `<=3.3.10`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [praisonaiagents vulnerable to arbitrary file write via unsanitized \`user_id\` in \`FileMemory.\_\_init\_\_()\` — path traversal to any writable location](https://agentprime.io/advisories/GHSA-gxmw-5f7x-6g22.md)
  `GHSA-gxmw-5f7x-6g22`, `CVE-2026-55527`, `PYSEC-2026-3902` · PyPI `praisonaiagents`: affected `<1.6.58`, fixed in `1.6.58` · CVSS 7.1 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [PraisonAI: \[Path Traversal\] agent tools escape the configured workspace via symlinks](https://agentprime.io/advisories/GHSA-ch89-h4r2-c8f8.md)
  `GHSA-ch89-h4r2-c8f8`, `CVE-2026-55540`, `PYSEC-2026-3888` · PyPI `praisonai`: affected `<4.6.58`, fixed in `4.6.58` · CVSS 7.1 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write](https://agentprime.io/advisories/CVE-2026-79655.md)
  `CVE-2026-79655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [dekdee adobe-xd-mcp file-access-from-request Endpoint xd-parser.ts path traversal](https://agentprime.io/advisories/CVE-2026-79622.md)
  `CVE-2026-79622` · CVE record: dekdee adobe-xd-mcp · CVSS 6.9 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint](https://agentprime.io/advisories/CVE-2026-57863.md)
  `CVE-2026-57863` · CVE record: crater-invoice-inc crater · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal](https://agentprime.io/advisories/CVE-2026-78886.md)
  `CVE-2026-78886` · CVE record: liketrek TREK · CVSS 6.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [TYPO3-EXT-SA-2026-017: Path Traversal in extension "Mask" (mask)](https://agentprime.io/advisories/PKSA-vwmg-xq1p-q4cz.md)
  `PKSA-vwmg-xq1p-q4cz`, `CVE-2026-77139` · Packagist `mask/mask`: affected `<8.3.12 || >=9.0.0, <9.0.11`, fixed in `8.3.12`, `9.0.11` · CVSS 6.0 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Path traversal in the images controller (see GHSA-mrvp-7wmx-5m4h)](https://agentprime.io/advisories/PKSA-2s8k-hn9c-bkvy.md)
  `PKSA-2s8k-hn9c-bkvy`, `CVE-2026-107844` · Packagist `contao/contao`: affected `>=5.0.0, <5.3.50 || >=5.4.0, <5.7.12`, fixed in `5.3.50`, `5.7.12` · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Path traversal in Sky Co., LTD. SKYSEA Client View and others](https://agentprime.io/advisories/CVE-2026-68062.md)
  `CVE-2026-68062` · CVE record: Sky Co., LTD. SKYSEA Client View and 1 more · CVSS 5.8 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [peerigon unzip-crx/unzip-crx-3 Archive Extraction index.js unzip path traversal](https://agentprime.io/advisories/CVE-2026-78638.md)
  `CVE-2026-78638` · CVE record: peerigon unzip-crx and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)](https://agentprime.io/advisories/GHSA-6rj2-96f5-chj9.md)
  `GHSA-6rj2-96f5-chj9` · PyPI `gitpython`: affected `<=3.1.58`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Arbitrary local file content disclosure via \[include\] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)](https://agentprime.io/advisories/GHSA-crmc-f4m7-33fj.md)
  `GHSA-crmc-f4m7-33fj` · PyPI `gitpython`: affected `<=3.1.58`, no fixed version yet · CVSS 8.4 High · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination](https://agentprime.io/advisories/GHSA-7r39-6q8m-qw68.md)
  `GHSA-7r39-6q8m-qw68` · PyPI `gitpython`: affected `<=3.1.58`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content](https://agentprime.io/advisories/GHSA-rj4c-4q9x-543x.md)
  `GHSA-rj4c-4q9x-543x` · Packagist `getgrav/grav`: affected `*`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion](https://agentprime.io/advisories/GHSA-896w-cw95-xq7w.md)
  `GHSA-896w-cw95-xq7w` · Packagist `getgrav/grav`: affected `*`, no fixed version yet · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Grav CMS before 2.0.16 Symlink Following via createLockFile](https://agentprime.io/advisories/CVE-2026-72696.md)
  `CVE-2026-72696` · CVE record: getgrav grav · CVSS 8.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Adminer before 5.4.3 Remote Code Execution via MSSQL PDO DSN Injection](https://agentprime.io/advisories/CVE-2026-56705.md)
  `CVE-2026-56705` · CVE record: vrana adminer · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Adminer before 5.4.3 Arbitrary File Deletion via SQLite Drop](https://agentprime.io/advisories/CVE-2026-34968.md)
  `CVE-2026-34968` · CVE record: vrana adminer · CVSS 7.2 High · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write](https://agentprime.io/advisories/CVE-2026-34967.md)
  `CVE-2026-34967` · CVE record: vrana adminer · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Path traversal
- [Cloudreve's remote download file paths can escape the selected destination directory](https://agentprime.io/advisories/GHSA-w8j7-39hp-8x59.md)
  `GHSA-w8j7-39hp-8x59`, `CVE-2026-101051`, `GO-2026-6289` · Go `github.com/cloudreve/Cloudreve/v4`: affected `<=4.0.0-20260606032813-26b6b1044b02`, no fixed version yet · CVSS 2.3 Low · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Faveo Helpdesk Logo SettingsController.php unlink path traversal](https://agentprime.io/advisories/CVE-2026-78435.md)
  `CVE-2026-78435` · CVE record: Faveo Helpdesk · CVSS 5.1 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability](https://agentprime.io/advisories/CVE-2026-78284.md)
  `CVE-2026-78284` · CVE record: Stylemix MasterStudy LMS · CVSS 8.6 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [3X-UI Vulnerable to Authenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation](https://agentprime.io/advisories/GHSA-jm48-m3rr-9hgg.md)
  `GHSA-jm48-m3rr-9hgg`, `CVE-2026-55477`, `GO-2026-6284` · Go `github.com/mhsanaei/3x-ui/v2` and 1 more: affected `<=2.9.4`, no fixed version yet · CVSS 7.2 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal, CWE-20
- [Apache Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result](https://agentprime.io/advisories/GHSA-f78g-9385-qxqj.md)
  `GHSA-f78g-9385-qxqj`, `CVE-2026-66907` · Maven `org.apache.camel:camel-google-storage`: affected `>=4.0.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 7.5 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Apache Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir](https://agentprime.io/advisories/GHSA-7jwc-q3fj-c9pq.md)
  `GHSA-7jwc-q3fj-c9pq`, `CVE-2026-60093` · Maven `org.apache.camel:camel-azure-storage-datalake`: affected `>=4.0.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 5.5 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Apache Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir](https://agentprime.io/advisories/GHSA-2x37-89hj-2j95.md)
  `GHSA-2x37-89hj-2j95`, `CVE-2026-66906` · Maven `org.apache.camel:camel-azure-storage-blob`: affected `>=4.0.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [DrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile](https://agentprime.io/advisories/CVE-2026-71932.md)
  `CVE-2026-71932` · CVE record: DrayTek Corporation VigorSwitch G2540xs and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite](https://agentprime.io/advisories/GHSA-vwc7-r8mq-g2x9.md)
  `GHSA-vwc7-r8mq-g2x9`, `CVE-2026-76845` · npm `adm-zip`: affected `>=0.5.9, <=0.6.0`, no fixed version yet · CVSS 6.8 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath](https://agentprime.io/advisories/GHSA-p3f5-w63m-mxph.md)
  `GHSA-p3f5-w63m-mxph` · npm `webpack-dev-middleware`: affected `*`, no fixed version yet · CVSS 7.4 High · Withdrawn · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Awx: project archive extraction allows path traversal file writes](https://agentprime.io/advisories/CVE-2026-71364.md)
  `CVE-2026-71364` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 and 4 more · CVSS 7.2 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [RansomLook Arbitrary File Read via Path Traversal in Post screen Field](https://agentprime.io/advisories/CVE-2026-78381.md)
  `CVE-2026-78381` · CVE record: ransomlook ransomlook · CVSS 8.2 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Mercado Pago Node.js SDK through 3.4.0 Path Injection via Unencoded Identifiers in Payment Clients](https://agentprime.io/advisories/CVE-2026-76842.md)
  `CVE-2026-76842` · CVE record: mercadopago mercadopago · CVSS 8.8 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [WordPress ShopBuilder Pro – Elementor WooCommerce Builder Addons plugin <= 2.2.0 - Arbitrary File Deletion vulnerability](https://agentprime.io/advisories/CVE-2026-32477.md)
  `CVE-2026-32477` · CVE record: RadiusTheme, LLC ShopBuilder Pro – Elementor WooCommerce Builder Addons · CVSS 8.6 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [WordPress WooCommerce File Approval plugin <= 10.7 - Arbitrary File Deletion vulnerability](https://agentprime.io/advisories/CVE-2026-28171.md)
  `CVE-2026-28171` · CVE record: vanquish WooCommerce File Approval · CVSS 8.6 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [WordPress Super Forms plugin <= 6.3.316 - Arbitrary File Download vulnerability](https://agentprime.io/advisories/CVE-2026-28167.md)
  `CVE-2026-28167` · CVE record: WebRehab Super Forms · CVSS 7.5 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Instance template path traversal allows arbitrary host file write as root](https://agentprime.io/advisories/CVE-2026-66897.md)
  `CVE-2026-66897` · CVE record: Canonical LXD · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [achorein expo-share-intent Android File Copy Routine ExpoShareIntentModule.kt getDataColumn path traversal](https://agentprime.io/advisories/CVE-2026-78196.md)
  `CVE-2026-78196` · CVE record: achorein expo-share-intent · CVSS 4.8 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [4MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File Read](https://agentprime.io/advisories/CVE-2026-78212.md)
  `CVE-2026-78212` · CVE record: 4MOSAn Security Technology 4MOSAn Management Center · CVSS 8.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [exceljs through 4.4.0 Path Traversal via Unvalidated addImage filename](https://agentprime.io/advisories/CVE-2026-78208.md)
  `CVE-2026-78208` · CVE record: exceljs exceljs · CVSS 8.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal
- [Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab](https://agentprime.io/advisories/CVE-2026-10053.md)
  `CVE-2026-10053` · CVE record: GitLab GitLab · CVSS 8.5 High · Not analysed yet · Published 23 Aug 2026 · Tags: Path traversal
- [WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter](https://agentprime.io/advisories/CVE-2026-18027.md)
  `CVE-2026-18027` · CVE record: webtoffee WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels · CVSS 6.5 Medium · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root](https://agentprime.io/advisories/GHSA-8h9m-22mv-qv5r.md)
  `GHSA-8h9m-22mv-qv5r` · PyPI `nltk`: affected `<=3.9.3`, no fixed version yet · CVSS 6.2 Medium · Withdrawn · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)](https://agentprime.io/advisories/GHSA-qq3h-cgj8-w3fx.md)
  `GHSA-qq3h-cgj8-w3fx` · PyPI `nltk`: affected `>=3.10.0`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Stable FrameNet and NKJP readers parse outside-root XML in 3.9.4](https://agentprime.io/advisories/GHSA-qp76-pq9f-gr9m.md)
  `GHSA-qp76-pq9f-gr9m` · PyPI `nltk`: affected `<=3.9.4`, no fixed version yet · CVSS 5.9 Medium · Withdrawn · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: Security Report: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read](https://agentprime.io/advisories/GHSA-8w48-h75v-cxpv.md)
  `GHSA-8w48-h75v-cxpv` · PyPI `nltk`: affected `<=3.9.4`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [Duplicate Advisory: NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely](https://agentprime.io/advisories/GHSA-343m-9fqq-97c7.md)
  `GHSA-343m-9fqq-97c7` · PyPI `nltk`: affected `>=3.10.0`, no fixed version yet · CVSS 5.5 Medium · Withdrawn · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2](https://agentprime.io/advisories/CVE-2026-76606.md)
  `CVE-2026-76606` · CVE record: fabrikar.com Fabrik extension for Joomla · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [Joomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.2](https://agentprime.io/advisories/CVE-2026-76598.md)
  `CVE-2026-76598` · CVE record: fabrikar.com Fabrik extension for Joomla · CVSS 8.7 High · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal, Broken access control
- [NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. \_load_lang_ngrams joins the corpus root with crubadan_code, the column-0 value read from the corpus table....](https://agentprime.io/advisories/GHSA-cv22-g7mw-8v73.md)
  `GHSA-cv22-g7mw-8v73`, `CVE-2026-71514`, `PYSEC-2026-3790` · PyPI `nltk`: affected `>=3.9.4, <3.10.3`, fixed in `3.10.3` · CVSS 2.0 Low · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [SiYuan before v3.7.4 Arbitrary File Deletion via removeTemplate](https://agentprime.io/advisories/CVE-2026-60084.md)
  `CVE-2026-60084` · CVE record: siyuan-note siyuan · CVSS 8.4 High · Not analysed yet · Published 22 Aug 2026 · Tags: Path traversal
- [Arc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitive](https://agentprime.io/advisories/CVE-2026-48105.md)
  `CVE-2026-48105` · CVE record: Basekick-Labs arc · CVSS 8.3 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal, CWE-345, CWE-913

Newest: <https://agentprime.io/advisories/tag/path-traversal.md>
Older: <https://agentprime.io/advisories/tag/path-traversal.md?cursor=WyIyMDI2LTA4LTIxVDIyOjQ3OjEzLjk5MzAwMFoiLCJDVkUtMjAyNi00ODEwNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=path-traversal&cursor=WyIyMDI2LTA4LTI1VDE4OjM1OjMyLjAwMDAwMFoiLCJHSFNBLXhjOWctajY5cS0zN3h3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/path-traversal/?cursor=WyIyMDI2LTA4LTI1VDE4OjM1OjMyLjAwMDAwMFoiLCJHSFNBLXhjOWctajY5cS0zN3h3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.