# Path traversal.

File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack](https://agentprime.io/advisories/CVE-2026-110690.md)
  `CVE-2026-110690` · CVE record: coderaiser cloudcmd · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush](https://agentprime.io/advisories/CVE-2026-90954.md)
  `CVE-2026-90954` · CVE record: Red Hat Red Hat Hardened Images · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion](https://agentprime.io/advisories/CVE-2026-107594.md)
  `CVE-2026-107594` · CVE record: Unknown File Upload to Order · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [Ultimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' Parameter](https://agentprime.io/advisories/CVE-2026-107508.md)
  `CVE-2026-107508` · CVE record: Unknown Ultimate Multisite · CVSS 8.6 High · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [Path traversal in Ubiquiti Inc UniFi Protect AI Key](https://agentprime.io/advisories/CVE-2026-110458.md)
  `CVE-2026-110458` · CVE record: Ubiquiti Inc UniFi Protect AI Key · CVSS 3.7 Low · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [Path traversal in Ubiquiti Inc UniFi Protect AI Key](https://agentprime.io/advisories/CVE-2026-110457.md)
  `CVE-2026-110457` · CVE record: Ubiquiti Inc UniFi Protect AI Key · CVSS 3.7 Low · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [External control of a file path in ONLYOFFICE Document Server](https://agentprime.io/advisories/CVE-2026-110385.md)
  `CVE-2026-110385` · CVE record: ONLYOFFICE Document Server · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Path traversal
- [Arbitrary file read and write](https://agentprime.io/advisories/CVE-2026-53564.md)
  `CVE-2026-53564` · CVE record: Citrix UniconOS · CVSS 5.1 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)](https://agentprime.io/advisories/CVE-2026-103820.md)
  `CVE-2026-103820` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-w6wh-p4g7-mpj2.md)
  `GHSA-w6wh-p4g7-mpj2`, `CVE-2026-96225` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 7 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/GHSA-2j93-m82w-73j2.md)
  `GHSA-2j93-m82w-73j2`, `CVE-2026-96231` · NuGet `Microsoft.NETCore.App.Runtime.linux-arm` and 7 more: affected `>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2`, fixed in `8.0.32`, `9.0.21`, `10.0.13`, `11.0.0-rc.2` · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)](https://agentprime.io/advisories/CVE-2026-90530.md)
  `CVE-2026-90530` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [IBM WebSphere Application Server Liberty Path Traversal](https://agentprime.io/advisories/CVE-2026-79715.md)
  `CVE-2026-79715` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter](https://agentprime.io/advisories/CVE-2026-63162.md)
  `CVE-2026-63162` · CVE record: Omnispace Agora Project · CVSS 8.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)](https://agentprime.io/advisories/CVE-2026-106634.md)
  `CVE-2026-106634` · CVE record: Adobe Adobe Experience Manager 6.5 LTS and 1 more · CVSS 7.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Backup Engine Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-108135.md)
  `CVE-2026-108135` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Dynamics Business Central Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102226.md)
  `CVE-2026-102226` · CVE record: Microsoft Microsoft Dynamics NAV 2018 · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Subsystem for Linux Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102204.md)
  `CVE-2026-102204` · CVE record: Microsoft Windows Subsystem for Linux (WSL2) · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102202.md)
  `CVE-2026-102202` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-97790.md)
  `CVE-2026-97790` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96911.md)
  `CVE-2026-96911` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows WalletService Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96243.md)
  `CVE-2026-96243` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Office SharePoint Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-85932.md)
  `CVE-2026-85932` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Skype for Business Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83746.md)
  `CVE-2026-83746` · CVE record: Microsoft Skype for Business Server 2015 CU13 and 2 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Skype for Business Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70297.md)
  `CVE-2026-70297` · CVE record: Microsoft Skype for Business Server 2015 CU13 and 2 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Defender Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70264.md)
  `CVE-2026-70264` · CVE record: Microsoft Windows Defender · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Projected File System Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70084.md)
  `CVE-2026-70084` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88191.md)
  `CVE-2026-88191` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88133.md)
  `CVE-2026-88133` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Host Guardian Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-88072.md)
  `CVE-2026-88072` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Update Orchestrator Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83933.md)
  `CVE-2026-83933` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft OpenSSH for Windows Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83923.md)
  `CVE-2026-83923` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83873.md)
  `CVE-2026-83873` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Encrypting File System (EFS) Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83683.md)
  `CVE-2026-83683` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows User Profile Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83659.md)
  `CVE-2026-83659` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Update Orchestrator Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-83507.md)
  `CVE-2026-83507` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Update Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69783.md)
  `CVE-2026-69783` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Backup Engine Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-62687.md)
  `CVE-2026-62687` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Office SharePoint Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-70298.md)
  `CVE-2026-70298` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [.NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70190.md)
  `CVE-2026-70190` · CVE record: Microsoft .NET 10.0 runtime and 4 more · CVSS 7.3 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [.NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70165.md)
  `CVE-2026-70165` · CVE record: Microsoft .NET 10.0 runtime and 4 more · CVSS 6.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [.NET Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70161.md)
  `CVE-2026-70161` · CVE record: Microsoft .NET 10.0 runtime and 4 more · CVSS 7.3 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Office SharePoint Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69943.md)
  `CVE-2026-69943` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows AppX Deployment Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85849.md)
  `CVE-2026-85849` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Hyper-V Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85343.md)
  `CVE-2026-85343` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Registry Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83927.md)
  `CVE-2026-83927` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Shell Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-70222.md)
  `CVE-2026-70222` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Internet (wininet.dll) Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-83865.md)
  `CVE-2026-83865` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Update Orchestrator Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83793.md)
  `CVE-2026-83793` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83784.md)
  `CVE-2026-83784` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Windows Search Component Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-83704.md)
  `CVE-2026-83704` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows Update Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69673.md)
  `CVE-2026-69673` · CVE record: Microsoft Windows 11 version 23H2 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows libarchive Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-69973.md)
  `CVE-2026-69973` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows AppX Deployment Service Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69969.md)
  `CVE-2026-69969` · CVE record: Microsoft Windows 10 Version 21H2 and 4 more · CVSS 4.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Windows libarchive Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-69968.md)
  `CVE-2026-69968` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Visual Studio Code Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-102238.md)
  `CVE-2026-102238` · CVE record: Microsoft Visual Studio Code · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Visual Studio Code Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-102229.md)
  `CVE-2026-102229` · CVE record: Microsoft Visual Studio Code · CVSS 6.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-105727.md)
  `CVE-2026-105727` · CVE record: Microsoft Microsoft Dynamics NAV 2018 · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [MP Manager through 1.1.0 Path Traversal via Archive Extraction sanitizeEntryName Bypass](https://agentprime.io/advisories/CVE-2026-110235.md)
  `CVE-2026-110235` · CVE record: Abdurazaaq Mohammed MP Manager · CVSS 6.7 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity](https://agentprime.io/advisories/CVE-2026-110232.md)
  `CVE-2026-110232` · CVE record: Fossify Fossify File Manager · CVSS 4.6 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/tag/path-traversal.md>
Older: <https://agentprime.io/advisories/tag/path-traversal.md?cursor=WyIyMDI2LTEwLTEzVDE4OjUwOjE0Ljc2NzAwMFoiLCJDVkUtMjAyNi0xMTAyMzIiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=path-traversal&cursor=WyIyMDI2LTEwLTE0VDEzOjUwOjA4Ljg3NjAwMFoiLCJDVkUtMjAyNi0xMDEyMTciXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/path-traversal/?cursor=WyIyMDI2LTEwLTE0VDEzOjUwOjA4Ljg3NjAwMFoiLCJDVkUtMjAyNi0xMDEyMTciXQ>. Everything for agents: <https://agentprime.io/llms.txt>.