# Path traversal. File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter](https://agentprime.io/advisories/CVE-2026-53528.md) `CVE-2026-53528` · CVE record: perber leafwiki · CVSS 8.8 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Atlantis Workspace Handling has Path Traversal that Allows Out-of-Bounds Directory Deletion/Creation](https://agentprime.io/advisories/GHSA-26w5-6g95-gj28.md) `GHSA-26w5-6g95-gj28`, `CVE-2026-64679`, `GO-2026-6273` · Go `github.com/runatlantis/atlantis`: affected `>=0.19.8, <0.45.0`, fixed in `0.45.0` · CVSS 8.1 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Runtipi: Authenticated arbitrary file write via backup restore symlink planting](https://agentprime.io/advisories/CVE-2026-55168.md) `CVE-2026-55168` · CVE record: runtipi runtipi · CVSS 6.5 Medium · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal, CWE-61 - [Duplicate Advisory: ONNX: TOCTOU arbitrary file read/write in save_external_dat](https://agentprime.io/advisories/GHSA-486p-g8x4-77mg.md) `GHSA-486p-g8x4-77mg` · PyPI `onnx`: affected `<=1.20.1`, no fixed version yet · CVSS 7.1 High · Withdrawn · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories](https://agentprime.io/advisories/CVE-2026-77815.md) `CVE-2026-77815` · CVE record: zanllp infinite-image-browsing · CVSS 8.7 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator](https://agentprime.io/advisories/CVE-2026-77814.md) `CVE-2026-77814` · CVE record: zanllp infinite-image-browsing · CVSS 8.7 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root](https://agentprime.io/advisories/CVE-2026-63343.md) `CVE-2026-63343` · CVE record: lxc incus · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Incus vulnerable to root RCE via image backup.yaml symlink](https://agentprime.io/advisories/CVE-2026-63125.md) `CVE-2026-63125` · CVE record: lxc incus · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal, CWE-61 - [Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.66](https://agentprime.io/advisories/CVE-2026-76611.md) `CVE-2026-76611` · CVE record: yootheme.com Zoo extension for Joomla · CVSS 6.9 Medium · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Joomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.40](https://agentprime.io/advisories/CVE-2026-75115.md) `CVE-2026-75115` · CVE record: yootheme.com YOOtheme Pro extension for Joomla · CVSS 7.0 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [JuiceFS Local Filestore Backend Joins Object Keys onto the Storage Root Without a Containment Check, Allowing Writes Outside the Configured Directory](https://agentprime.io/advisories/CVE-2026-77763.md) `CVE-2026-77763` · CVE record: juicedata juicefs · CVSS 7.1 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [SiYuan before v3.7.4 Path Traversal via packageName](https://agentprime.io/advisories/CVE-2026-77086.md) `CVE-2026-77086` · CVE record: siyuan-note siyuan · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Path Traversal in MISP Object Template Resolution During STIX Import and Export in misp-stix library](https://agentprime.io/advisories/CVE-2026-77751.md) `CVE-2026-77751` · CVE record: misp misp-stix · CVSS 8.8 High · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Datiphy Data Management Center - External Control of File Name or Path](https://agentprime.io/advisories/CVE-2026-76158.md) `CVE-2026-76158` · CVE record: Datiphy Inc. Data Management Center · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: Path traversal - [Path Traversal Vulnerability in apport-unpack](https://agentprime.io/advisories/CVE-2026-77113.md) `CVE-2026-77113` · CVE record: Canonical Apport · CVSS 6.7 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17424.md) `CVE-2026-17424` · CVE record: IBM AIX and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-17171.md) `CVE-2026-17171` · CVE record: IBM AIX and 1 more · CVSS 7.8 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Azure Logic Apps Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69400.md) `CVE-2026-69400` · CVE record: Microsoft Azure Logic Apps · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Microsoft Fabric Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-63509.md) `CVE-2026-63509` · CVE record: Microsoft Microsoft Fabric · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16989.md) `CVE-2026-16989` · CVE record: IBM AIX and 1 more · CVSS 7.1 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16980.md) `CVE-2026-16980` · CVE record: IBM AIX and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Dockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion](https://agentprime.io/advisories/CVE-2026-73040.md) `CVE-2026-73040` · CVE record: louislam dockge · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Path traversal in Apple container](https://agentprime.io/advisories/CVE-2026-64777.md) `CVE-2026-64777` · CVE record: Apple container · CVSS 4.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Winter: Local File Inclusion through =include directives in JavaScript asset compilation](https://agentprime.io/advisories/GHSA-2223-f22x-24cq.md) `GHSA-2223-f22x-24cq`, `CVE-2026-79773`, `PKSA-xv7p-39zk-tqqd` · Packagist `winter/wn-system-module`: affected `<1.2.13`, fixed in `1.2.13` · CVSS 6.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal, Information disclosure - [Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets](https://agentprime.io/advisories/GHSA-58fp-mcx6-7qf9.md) `GHSA-58fp-mcx6-7qf9`, `CVE-2026-63179`, `PKSA-54hz-1x12-hy82` · Packagist `winter/wn-backend-module`: affected `<1.2.13`, fixed in `1.2.13` · CVSS 4.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution](https://agentprime.io/advisories/GHSA-ghvf-qf6h-g8x5.md) `GHSA-ghvf-qf6h-g8x5` · npm `@nocobase/server`: affected `<2.1.5`, fixed in `2.1.5` · No CVSS score · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal, Information disclosure, Unrestricted file upload, CWE-829 - [Laravel Backpack CRUD: Arbitrary file deletion via attacker-controlled clear\_\\[\] in HasUploadFields::uploadMultipleFilesToDisk](https://agentprime.io/advisories/GHSA-8xjm-wqrp-2f25.md) `GHSA-8xjm-wqrp-2f25`, `CVE-2026-54178`, `PKSA-kbc2-vykn-d61h` · Packagist `backpack/crud`: affected `>=5.0.0 || >=6.0.0, <6.8.12 || >=7.0.0, <7.0.35`, fixed in `6.8.12`, `7.0.35` · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal, Broken access control - [next-video: Unauthenticated arbitrary file read via /api/video request handler](https://agentprime.io/advisories/GHSA-2p39-2jf3-fv2q.md) `GHSA-2p39-2jf3-fv2q`, `CVE-2026-54150` · npm `next-video`: affected `<2.8.1`, fixed in `2.8.1` · CVSS 6.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal, Information disclosure - [libgit2: Submodule path traversal](https://agentprime.io/advisories/CVE-2026-53584.md) `CVE-2026-53584` · CVE record: libgit2 libgit2 · CVSS 4.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Mongoose: Path traversal in SSI #include directives enables arbitrary file read](https://agentprime.io/advisories/CVE-2026-73255.md) `CVE-2026-73255` · CVE record: cesanta mongoose · CVSS 6.5 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Velero vulnerable to file path traversal when extracting from backup's tarball](https://agentprime.io/advisories/GHSA-j2g6-362q-6qc6.md) `GHSA-j2g6-362q-6qc6`, `CVE-2026-32637`, `GO-2026-6259` · Go `github.com/vmware-tanzu/velero`: affected `<1.18.1`, fixed in `1.18.1` · CVSS 5.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy](https://agentprime.io/advisories/CVE-2026-77176.md) `CVE-2026-77176` · CVE record: Red Hat Red Hat OpenShift Container Platform 4 and 1 more · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18274.md) `CVE-2026-18274` · CVE record: Heimdall Data Database Proxy · CVSS 7.2 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-18267.md) `CVE-2026-18267` · CVE record: Kenwood DNR1007XR · CVSS 6.8 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Apache InLong: Agent path traversal via unvalidated file source path](https://agentprime.io/advisories/CVE-2026-63043.md) `CVE-2026-63043` · CVE record: Apache Software Foundation Apache InLong · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16926.md) `CVE-2026-16926` · CVE record: IBM AIX and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Arbitrary file overwrite vulnerability in DigiDoc4 client](https://agentprime.io/advisories/CVE-2026-70383.md) `CVE-2026-70383` · CVE record: Estonian Information System Authority (RIA) DigiDoc4 · CVSS 8.4 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Path Traversal in ATutor](https://agentprime.io/advisories/CVE-2026-64967.md) `CVE-2026-64967` · CVE record: ATutor ATutor · CVSS 6.9 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Path Traversal leading to Remote Code Execution in ATutor](https://agentprime.io/advisories/CVE-2026-64966.md) `CVE-2026-64966` · CVE record: ATutor ATutor · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Path Traversal in ATutor](https://agentprime.io/advisories/CVE-2026-64963.md) `CVE-2026-64963` · CVE record: ATutor ATutor · CVSS 2.3 Low · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [n8n before 2.34.1 Remote Code Execution via Path Traversal](https://agentprime.io/advisories/CVE-2026-77068.md) `CVE-2026-77068` · CVE record: n8n-io n8n · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file](https://agentprime.io/advisories/CVE-2026-14947.md) `CVE-2026-14947` · CVE record: Frauscher Sensortechnik FDS 102 · CVSS 8.6 High · Not analysed yet · Published 20 Aug 2026 · Tags: Path traversal - [Agno PythonTools Path Traversal via joinpath file_name argument](https://agentprime.io/advisories/CVE-2026-76832.md) `CVE-2026-76832` · CVE record: Agno AGI Agno · CVSS 8.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Path Traversal through Automation Broker in Splunk SOAR](https://agentprime.io/advisories/CVE-2026-76369.md) `CVE-2026-76369` · CVE record: Splunk Splunk SOAR · CVSS 2.7 Low · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Path Traversal through Universal Forwarder Installer Archive Extraction in Splunk SOAR](https://agentprime.io/advisories/CVE-2026-76359.md) `CVE-2026-76359` · CVE record: Splunk Splunk SOAR · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Path Traversal through App Installation Tar Extraction in Splunk SOAR](https://agentprime.io/advisories/CVE-2026-76358.md) `CVE-2026-76358` · CVE record: Splunk Splunk SOAR · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR](https://agentprime.io/advisories/CVE-2026-76357.md) `CVE-2026-76357` · CVE record: Splunk Splunk SOAR · CVSS 7.6 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Path Traversal through Knowledge Bundle Replication in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76353.md) `CVE-2026-76353` · CVE record: Splunk Splunk Enterprise · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Path Traversal through Splunk Web Static File Serving in Splunk Enterprise](https://agentprime.io/advisories/CVE-2026-76337.md) `CVE-2026-76337` · CVE record: Splunk Splunk Enterprise · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [DS8900F and DS8A00 Information Disclosure](https://agentprime.io/advisories/CVE-2025-36398.md) `CVE-2025-36398` · CVE record: IBM DS8A00 (R10.0 - R10.1) and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [logto-tunnel serves files outside \`--experience-path\` via path traversal](https://agentprime.io/advisories/GHSA-rxjr-6c9q-h67x.md) `GHSA-rxjr-6c9q-h67x`, `CVE-2026-63188` · npm `@logto/tunnel`: affected `<0.3.9`, fixed in `0.3.9` · CVSS 8.7 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [IBM OpenBMC Code Execution](https://agentprime.io/advisories/CVE-2026-18849.md) `CVE-2026-18849` · CVE record: IBM OPENBMC · CVSS 6.8 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal](https://agentprime.io/advisories/CVE-2026-76576.md) `CVE-2026-76576` · CVE record: yangzongzhuan RuoYi-Vue · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [BuildKit: Malicious client can bypass destination directory validation on local sources upload](https://agentprime.io/advisories/CVE-2026-75593.md) `CVE-2026-75593` · CVE record: moby buildkit · CVSS 7.2 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Vulnerabilities in IBM AIX and PowerVM VIOS](https://agentprime.io/advisories/CVE-2026-16888.md) `CVE-2026-16888` · CVE record: IBM AIX and 1 more · CVSS 3.7 Low · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal - [Copier has a trust-prefix bypass via path traversal that runs tasks unprompted](https://agentprime.io/advisories/GHSA-9gmc-jqmh-3rvm.md) `GHSA-9gmc-jqmh-3rvm`, `CVE-2026-53951`, `PYSEC-2026-3818` · PyPI `copier`: affected `>=9.5.0, <9.15.2`, fixed in `9.15.2` · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal, Code injection - [claude-faf-mcp has an arbitrary local file read/write via unconfined \`path\` argument in FAF tools](https://agentprime.io/advisories/GHSA-rr55-jp92-8wp2.md) `GHSA-rr55-jp92-8wp2` · npm `claude-faf-mcp`: affected `<5.7.2`, fixed in `5.7.2` · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal, Information disclosure - [faf-mcp has an arbitrary local file read/write via unconfined \`path\` argument in FAF tools](https://agentprime.io/advisories/GHSA-j4r7-8ph4-43g3.md) `GHSA-j4r7-8ph4-43g3` · npm `faf-mcp`: affected `<2.1.3`, fixed in `2.1.3` · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal, Information disclosure - [grok-faf-mcp has an arbitrary local file read via unconfined \`path\` argument in FAF tools](https://agentprime.io/advisories/GHSA-cc2g-gq8c-r332.md) `GHSA-cc2g-gq8c-r332` · npm `grok-faf-mcp`: affected `<1.5.3`, fixed in `1.5.3` · CVSS 7.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal, Information disclosure - [Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager](https://agentprime.io/advisories/CVE-2026-49441.md) `CVE-2026-49441` · CVE record: wazuh wazuh · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Path traversal Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .