# Path traversal.

File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Path traversal in Blinko](https://agentprime.io/advisories/CVE-2026-108980.md)
  `CVE-2026-108980` · CVE record: Blinko Blinko · CVSS 8.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal](https://agentprime.io/advisories/CVE-2026-108772.md)
  `CVE-2026-108772` · CVE record: bleenco abstruse · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link](https://agentprime.io/advisories/CVE-2026-108902.md)
  `CVE-2026-108902` · CVE record: ph7software ph7builder · CVSS 7.2 High · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [thClaws through 0.141.0 Symlink Following File Write via POST /v1/inputs](https://agentprime.io/advisories/CVE-2026-108839.md)
  `CVE-2026-108839` · CVE record: thClaws thClaws · CVSS 2.3 Low · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistralrs-code-exec](https://agentprime.io/advisories/CVE-2026-108759.md)
  `CVE-2026-108759` · CVE record: EricLBuehler mistral.rs · CVSS 7.6 High · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [MoAI-ADK through 3.1.2 Symlink Following via moai init Template Deployer](https://agentprime.io/advisories/CVE-2026-108751.md)
  `CVE-2026-108751` · CVE record: modu-ai moai-adk · CVSS 4.8 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [answer-me-with-html through 0.5.0 Symlink Following in Code Block src Embedding](https://agentprime.io/advisories/CVE-2026-108723.md)
  `CVE-2026-108723` · CVE record: QingYunA answer-me-with-html · CVSS 2.0 Low · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [InstantSoft icms2 Image image.php files_delete_file path traversal](https://agentprime.io/advisories/CVE-2026-108567.md)
  `CVE-2026-108567` · CVE record: InstantSoft icms2 · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [Lippu Docx Reader Office Viewer App path traversal](https://agentprime.io/advisories/CVE-2026-108544.md)
  `CVE-2026-108544` · CVE record: Lippu Docx Reader Office Viewer App · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [ag2ai ag2 UserProxyAgent os.path.join path traversal](https://agentprime.io/advisories/CVE-2026-108543.md)
  `CVE-2026-108543` · CVE record: ag2ai ag2 · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter](https://agentprime.io/advisories/CVE-2026-108694.md)
  `CVE-2026-108694` · CVE record: C4illin ConvertX · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2026 · Tags: Path traversal
- [slide-maker through 5.8.0 Path Traversal via generate_images_openai.py](https://agentprime.io/advisories/CVE-2026-108603.md)
  `CVE-2026-108603` · CVE record: addsumtech slide-maker · CVSS 4.8 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability](https://agentprime.io/advisories/CVE-2026-78530.md)
  `CVE-2026-78530` · CVE record: Chimpstudio FoodBakery · CVSS 7.7 High · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [WordPress Presto Player Pro plugin <= 3.0.1 - Arbitrary File Deletion vulnerability](https://agentprime.io/advisories/CVE-2026-66481.md)
  `CVE-2026-66481` · CVE record: Presto Player Presto Player Pro · CVSS 6.8 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability](https://agentprime.io/advisories/CVE-2026-40805.md)
  `CVE-2026-40805` · CVE record: PeepSo PeepSo · CVSS 7.7 High · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [open-multi-agent 1.5.0 through 1.21.2 Sandbox Escape via file_write Dangling Symlink](https://agentprime.io/advisories/CVE-2026-108600.md)
  `CVE-2026-108600` · CVE record: open-multi-agent open-multi-agent · CVSS 5.7 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [Phi 0.1.1 through 0.28.4 Symlink Workspace Write Restriction Bypass](https://agentprime.io/advisories/CVE-2026-108599.md)
  `CVE-2026-108599` · CVE record: pulseaiclub phi · CVSS 5.7 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [Cohere Python SDK 5.11.0 through 7.2.0 Path Traversal via SageMaker Tar Extraction](https://agentprime.io/advisories/CVE-2026-108597.md)
  `CVE-2026-108597` · CVE record: cohere-ai cohere-python · CVSS 5.9 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [InnoShop 0.9.2 Local File Disclosure via AI Core MCP file_upload Tool](https://agentprime.io/advisories/CVE-2026-108591.md)
  `CVE-2026-108591` · CVE record: innocommerce InnoShop · CVSS 5.9 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.13 - Arbitrary File Deletion vulnerability](https://agentprime.io/advisories/CVE-2026-105892.md)
  `CVE-2026-105892` · CVE record: rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [argocd-mcp through 0.9.0 Path Traversal via delete_application Tool](https://agentprime.io/advisories/CVE-2026-108585.md)
  `CVE-2026-108585` · CVE record: argoproj-labs argocd-mcp · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [Listdom: AI-powered Business Directory with Classifieds Ads Listings <= 6.1.2 - Authenticated (Administrator+) Path Traversal to Arbitrary File Deletion via 'ix\[file\]' Parameter](https://agentprime.io/advisories/CVE-2026-104722.md)
  `CVE-2026-104722` · CVE record: webilia Listdom: AI-powered Business Directory with Classifieds Ads Listings · CVSS 4.9 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [Divi Plus <= 2.4.0 - Unauthenticated Arbitrary File Read via 'svg_image' Parameter](https://agentprime.io/advisories/CVE-2026-91136.md)
  `CVE-2026-91136` · CVE record: Divi Essential Divi Plus · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom\[fields\]\[\<data_name>\]\[n\]\[org\]' Parameter](https://agentprime.io/advisories/CVE-2026-104801.md)
  `CVE-2026-104801` · CVE record: themeisle PPOM – Product Addons & Custom Fields for WooCommerce · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via \[siteorigin_widget\] Shortcode 'value' JSON Instance (design.colors LESS Variable)](https://agentprime.io/advisories/CVE-2026-97348.md)
  `CVE-2026-97348` · CVE record: gpriday SiteOrigin Widgets Bundle · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [W3 Total Cache < 2.10.6 - Author+ Path Traversal via CDN Media Library Import](https://agentprime.io/advisories/CVE-2026-107321.md)
  `CVE-2026-107321` · CVE record: Unknown W3 Total Cache · CVSS 5.4 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [Post Export Import with Media <= 1.17.1 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_path' Parameter in media_metadata.json](https://agentprime.io/advisories/CVE-2026-104763.md)
  `CVE-2026-104763` · CVE record: wpazleen Post Export Import with Media · CVSS 4.9 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Path traversal
- [Shiny for Python has path traversal in bookmark restore](https://agentprime.io/advisories/GHSA-47c3-hpmg-7j6p.md)
  `GHSA-47c3-hpmg-7j6p`, `CVE-2026-108258`, `PYSEC-2026-4300` · PyPI `shiny`: affected `>=1.4.0, <1.6.4`, fixed in `1.6.4` · CVSS 6.9 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [Contao: Path traversal in the images controller](https://agentprime.io/advisories/GHSA-mrvp-7wmx-5m4h.md)
  `GHSA-mrvp-7wmx-5m4h`, `CVE-2026-107844`, `PKSA-6j5h-bxmj-94h9` · Packagist `contao/core-bundle`: affected `>=4.1.0, <5.3.50 || >=5.4.0-RC1, <5.7.12`, fixed in `5.3.50`, `5.7.12` · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)](https://agentprime.io/advisories/GHSA-fr26-jjhm-638c.md)
  `GHSA-fr26-jjhm-638c`, `CVE-2026-123815` · PyPI `pyload-ng`: affected `<=0.5.0b3.dev101`, no fixed version yet · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal, Unrestricted file upload
- [Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied](https://agentprime.io/advisories/GHSA-p8v3-89rh-jxc7.md)
  `GHSA-p8v3-89rh-jxc7`, `CVE-2026-107810`, `GO-2026-6707` · Go `github.com/0xJacky/Nginx-UI`: affected `>=1.9.10-0.20250517140552-daee3ac7ade1, <1.9.10-0.20260728074146-a467ed652591`, fixed in `1.9.10-0.20260728074146-a467ed652591` · CVSS 8.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal, CWE-61
- [Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix](https://agentprime.io/advisories/CVE-2026-108119.md)
  `CVE-2026-108119` · CVE record: Red Hat Red Hat Hardened Images and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert](https://agentprime.io/advisories/CVE-2026-108158.md)
  `CVE-2026-108158` · CVE record: mynaparrot plugNmeet-server · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [LobsterAI 2026.5.27 through 2026.9.23 Arbitrary Directory Deletion via Skill \_meta.json](https://agentprime.io/advisories/CVE-2026-108156.md)
  `CVE-2026-108156` · CVE record: netease-youdao LobsterAI · CVSS 6.9 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction](https://agentprime.io/advisories/CVE-2026-104081.md)
  `CVE-2026-104081` · CVE record: kalcaddle KodExplorer · CVSS 7.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [Apache Camel Karavan: project file name path traversal when committing a project to Git](https://agentprime.io/advisories/CVE-2026-103412.md)
  `CVE-2026-103412` · CVE record: Apache Software Foundation Apache Camel Karavan · CVSS 8.8 High · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [WordPress PDF for Contact Form 7 plugin <= 7.1.0 - Arbitrary File Download vulnerability](https://agentprime.io/advisories/CVE-2026-94664.md)
  `CVE-2026-94664` · CVE record: add-ons.org PDF for Contact Form 7 · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [WordPress Generate PDF using Contact Form 7 plugin <= 4.2.1 - Arbitrary File Download vulnerability](https://agentprime.io/advisories/CVE-2026-94666.md)
  `CVE-2026-94666` · CVE record: ZealousWeb Generate PDF using Contact Form 7 · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [Path traversal in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2026-78340.md)
  `CVE-2026-78340` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 6.3 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /expose](https://agentprime.io/advisories/CVE-2026-107935.md)
  `CVE-2026-107935` · CVE record: Red Hat Red Hat Build of Podman Desktop and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Oct 2026 · Tags: Path traversal
- [Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry](https://agentprime.io/advisories/GHSA-556j-vv39-8rqv.md)
  `GHSA-556j-vv39-8rqv`, `CVE-2026-107716`, `PYSEC-2026-4201` · PyPI `banks`: affected `<2.5.1`, fixed in `2.5.1` · CVSS 7.3 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls](https://agentprime.io/advisories/GHSA-9mp3-24cc-77mg.md)
  `GHSA-9mp3-24cc-77mg`, `CVE-2026-61445`, `PYSEC-2026-4253` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal, Command injection
- [Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution](https://agentprime.io/advisories/CVE-2026-89091.md)
  `CVE-2026-89091` · CVE record: Red Hat Migration Toolkit for Applications 8 and 4 more · CVSS 8.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection](https://agentprime.io/advisories/CVE-2026-75875.md)
  `CVE-2026-75875` · CVE record: IBM Guardium Data Protection · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-82900.md)
  `CVE-2026-82900` · CVE record: IBM Guardium Data Protection · CVSS 8.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84247.md)
  `CVE-2026-84247` · CVE record: IBM Guardium Data Protection · CVSS 8.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [Satel Netco Design Relative Path Traversal](https://agentprime.io/advisories/CVE-2026-105275.md)
  `CVE-2026-105275` · CVE record: Satel Satel Netco Design · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [Satel Netco Design Relative path traversal](https://agentprime.io/advisories/CVE-2026-101024.md)
  `CVE-2026-101024` · CVE record: Satel Satel Netco Design · CVSS 8.7 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-19493.md)
  `CVE-2026-19493` · CVE record: IBM Security Verify Access and 3 more · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction](https://agentprime.io/advisories/CVE-2026-107707.md)
  `CVE-2026-107707` · CVE record: Intego Intego Antivirus · CVSS 8.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [Improper link resolution in asset bundling output handling in aws-cdk-lib](https://agentprime.io/advisories/CVE-2026-107608.md)
  `CVE-2026-107608` · CVE record: AWS aws-cdk-lib · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [IBM Guardium Data Protection Path Traversal](https://agentprime.io/advisories/CVE-2026-84275.md)
  `CVE-2026-84275` · CVE record: IBM Guardium Data Protection · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [PraisonAI: ContextGatherer include resolution permits absolute and traversal reads outside the workspace](https://agentprime.io/advisories/GHSA-q7m5-3jmv-vm48.md)
  `GHSA-q7m5-3jmv-vm48`, `CVE-2026-61431`, `PYSEC-2026-4258` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal, Information disclosure
- [datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory](https://agentprime.io/advisories/GHSA-77xj-x4rm-935c.md)
  `GHSA-77xj-x4rm-935c`, `CVE-2026-107377`, `PYSEC-2026-4205` · PyPI `datamodel-code-generator`: affected `>=0.59.0, <0.81.0`, fixed in `0.81.0` · CVSS 7.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [PraisonAI: Project custom command templates can read outside-workspace files into model prompts](https://agentprime.io/advisories/GHSA-xpx6-x8c2-mw5w.md)
  `GHSA-xpx6-x8c2-mw5w`, `CVE-2026-60088`, `PYSEC-2026-4261` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal, Information disclosure
- [Bower decompress-zip has a path traversal vulnerability](https://agentprime.io/advisories/CVE-2026-107709.md)
  `CVE-2026-107709` · CVE record: Bower Decompress-Zip decompress-zip · CVSS 7.8 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [PraisonAI: SkillTools Executes Scripts Without Path Containment Validation](https://agentprime.io/advisories/GHSA-c44f-37qr-gw3f.md)
  `GHSA-c44f-37qr-gw3f`, `CVE-2026-61443`, `PYSEC-2026-4270` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 8.6 High · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal, Command injection
- [PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspace](https://agentprime.io/advisories/GHSA-4xxv-6wmf-xf45.md)
  `GHSA-4xxv-6wmf-xf45`, `CVE-2026-61432`, `PYSEC-2026-4268` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 6.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal, Information disclosure
- [PraisonAI: Project config can auto-save agent output outside the project root](https://agentprime.io/advisories/GHSA-qjw5-xwrp-xwpq.md)
  `GHSA-qjw5-xwrp-xwpq`, `CVE-2026-60089`, `PYSEC-2026-4273` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 6.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal
- [Go-getter vulnerable to a path traversal in S3/GCS directory download handling](https://agentprime.io/advisories/CVE-2026-19585.md)
  `CVE-2026-19585` · CVE record: HashiCorp Shared library · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/tag/path-traversal.md>
Older: <https://agentprime.io/advisories/tag/path-traversal.md?cursor=WyIyMDI2LTEwLTA4VDE1OjIwOjI4LjYwOTAwMFoiLCJDVkUtMjAyNi0xOTU4NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=path-traversal&cursor=WyIyMDI2LTEwLTEyVDAyOjMwOjE3LjExMzAwMFoiLCJDVkUtMjAyNi0xMDg3OTAiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/path-traversal/?cursor=WyIyMDI2LTEwLTEyVDAyOjMwOjE3LjExMzAwMFoiLCJDVkUtMjAyNi0xMDg3OTAiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.