# Path traversal.

File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP](https://agentprime.io/advisories/CVE-2026-110231.md)
  `CVE-2026-110231` · CVE record: muCommander muCommander · CVSS 5.6 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameter](https://agentprime.io/advisories/CVE-2026-110212.md)
  `CVE-2026-110212` · CVE record: Stonewuu ai-fusion-video · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in Fortinet FortiSIEM](https://agentprime.io/advisories/CVE-2026-106173.md)
  `CVE-2026-106173` · CVE record: Fortinet FortiSIEM · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Local Privilege Escalation](https://agentprime.io/advisories/CVE-2026-53562.md)
  `CVE-2026-53562` · CVE record: Citrix UniconOS · CVSS 8.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile](https://agentprime.io/advisories/CVE-2026-110116.md)
  `CVE-2026-110116` · CVE record: risesoft-y9 Digital-Infrastructure · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream](https://agentprime.io/advisories/CVE-2026-110115.md)
  `CVE-2026-110115` · CVE record: risesoft-y9 Digital-Infrastructure · CVSS 8.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in Ivanti Xtraction](https://agentprime.io/advisories/CVE-2026-106047.md)
  `CVE-2026-106047` · CVE record: Ivanti Xtraction · CVSS 7.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [External control of a file path in Ivanti Xtraction](https://agentprime.io/advisories/CVE-2026-106042.md)
  `CVE-2026-106042` · CVE record: Ivanti Xtraction · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in Ivanti Xtraction](https://agentprime.io/advisories/CVE-2026-106034.md)
  `CVE-2026-106034` · CVE record: Ivanti Xtraction · CVSS 5.0 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions](https://agentprime.io/advisories/CVE-2026-103928.md)
  `CVE-2026-103928` · CVE record: metabase metabase · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Hyperscale Path Traversal](https://agentprime.io/advisories/CVE-2026-18228.md)
  `CVE-2026-18228` · CVE record: Commvault Commvault Cloud · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root](https://agentprime.io/advisories/CVE-2026-109965.md)
  `CVE-2026-109965` · CVE record: oraios serena · CVSS 8.4 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [YouTransfer Template Rendering template path traversal](https://agentprime.io/advisories/CVE-2026-109519.md)
  `CVE-2026-109519` · CVE record: YouTransfer · CVSS 6.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file](https://agentprime.io/advisories/CVE-2026-93347.md)
  `CVE-2026-93347` · CVE record: Wazuh wazuh-manager · CVSS 6.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions](https://agentprime.io/advisories/CVE-2026-74043.md)
  `CVE-2026-74043` · CVE record: Wazuh wazuh-manager · CVSS 8.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers](https://agentprime.io/advisories/CVE-2026-74033.md)
  `CVE-2026-74033` · CVE record: Wazuh wazuh-manager · CVSS 8.4 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers](https://agentprime.io/advisories/CVE-2026-74031.md)
  `CVE-2026-74031` · CVE record: Wazuh wazuh-manager · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in NVIDIA AIStore framework](https://agentprime.io/advisories/CVE-2026-65164.md)
  `CVE-2026-65164` · CVE record: NVIDIA AIStore framework · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in NVIDIA AIStore framework](https://agentprime.io/advisories/CVE-2026-65161.md)
  `CVE-2026-65161` · CVE record: NVIDIA AIStore framework · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in NVIDIA AIStore framework](https://agentprime.io/advisories/CVE-2026-65103.md)
  `CVE-2026-65103` · CVE record: NVIDIA AIStore framework · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [SeldonIO MLServer environment_tarball env.py \_extract_env path traversal](https://agentprime.io/advisories/CVE-2026-109156.md)
  `CVE-2026-109156` · CVE record: SeldonIO MLServer · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [DeepPavlov Model Download untar path traversal](https://agentprime.io/advisories/CVE-2026-109155.md)
  `CVE-2026-109155` · CVE record: DeepPavlov · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal](https://agentprime.io/advisories/CVE-2026-109153.md)
  `CVE-2026-109153` · CVE record: MosaicML Composer · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [jbardin scp.py SCP Receive \_recv_pushd path traversal](https://agentprime.io/advisories/CVE-2026-109152.md)
  `CVE-2026-109152` · CVE record: jbardin scp.py · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in Siemens .NET Client Library for SIMATIC S7 Webserver API](https://agentprime.io/advisories/CVE-2026-85114.md)
  `CVE-2026-85114` · CVE record: Siemens .NET Client Library for SIMATIC S7 Webserver API · CVSS 8.7 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in Siemens Industrial Edge Device Kit - arm64 V1.10 and others](https://agentprime.io/advisories/CVE-2026-44415.md)
  `CVE-2026-44415` · CVE record: Siemens Industrial Edge Device Kit - arm64 V1.10 and 4 more · CVSS 8.9 High · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Path traversal in Siemens Industrial Edge Cloud Device (IECD) and others](https://agentprime.io/advisories/CVE-2026-44414.md)
  `CVE-2026-44414` · CVE record: Siemens Industrial Edge Cloud Device (IECD) and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Polaris Office App Document Intake com.infraware.service.m.n.a path traversal](https://agentprime.io/advisories/CVE-2026-109106.md)
  `CVE-2026-109106` · CVE record: Polaris Office App · CVSS 4.8 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build 202606…](https://agentprime.io/advisories/CVE-2026-78799.md)
  `CVE-2026-78799` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Path traversal
- [EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal](https://agentprime.io/advisories/CVE-2026-108940.md)
  `CVE-2026-108940` · CVE record: EricLBuehler Mistral.rs · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Security Vulnerability identified in IBM TRIRIGA - Zip Slip](https://agentprime.io/advisories/CVE-2026-102627.md)
  `CVE-2026-102627` · CVE record: IBM TRIRIGA Application Platform · CVSS 8.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [IBM Planning Analytics Local is affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2026-75061.md)
  `CVE-2026-75061` · CVE record: IBM Planning Analytics · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [IBM Planning Analytics Local is affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2026-19627.md)
  `CVE-2026-19627` · CVE record: IBM Planning Analytics · CVSS 8.2 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [DataStage on Cloud Pak for Data Path Traversal](https://agentprime.io/advisories/CVE-2026-82101.md)
  `CVE-2026-82101` · CVE record: IBM DataStage on Cloud Pak for Data · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [DataStage on Cloud Pak for Data Path Traversal](https://agentprime.io/advisories/CVE-2026-82110.md)
  `CVE-2026-82110` · CVE record: IBM DataStage on Cloud Pak for Data · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Frappe Framework before v16.30.0 Arbitrary File Read via Outgoing Email HTML](https://agentprime.io/advisories/CVE-2026-109601.md)
  `CVE-2026-109601` · CVE record: frappe frappe · CVSS 8.2 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestor](https://agentprime.io/advisories/CVE-2026-109596.md)
  `CVE-2026-109596` · CVE record: gohugoio hugo · CVSS 6.7 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Hugo v0.84.0 before v0.167.0 Path Traversal via js.Build ESBuild Resolver](https://agentprime.io/advisories/CVE-2026-109595.md)
  `CVE-2026-109595` · CVE record: gohugoio hugo · CVSS 6.7 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Hugo before v0.167.0 Path Traversal via css.Sass Import Fallback](https://agentprime.io/advisories/CVE-2026-109574.md)
  `CVE-2026-109574` · CVE record: gohugoio hugo · CVSS 6.7 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [IBM Maximo Application Suite Information Disclosure](https://agentprime.io/advisories/CVE-2026-105052.md)
  `CVE-2026-105052` · CVE record: IBM Maximo Application Suite · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction](https://agentprime.io/advisories/CVE-2026-109375.md)
  `CVE-2026-109375` · CVE record: Vercel deepsec · CVSS 4.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot Segments](https://agentprime.io/advisories/CVE-2021-48011.md)
  `CVE-2021-48011` · CVE record: lukejacksonn servor · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [ConvertX: Path Traversal vulnerability leading to Arbitrary File Write](https://agentprime.io/advisories/CVE-2026-59976.md)
  `CVE-2026-59976` · CVE record: C4illin ConvertX · CVSS 8.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Path traversal in Gleam via unvalidated package application names](https://agentprime.io/advisories/CVE-2026-103061.md)
  `CVE-2026-103061` · CVE record: Gleam Gleam · CVSS 5.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Path traversal in Progress MarkLogic Server Query Console](https://agentprime.io/advisories/CVE-2026-85964.md)
  `CVE-2026-85964` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter](https://agentprime.io/advisories/CVE-2026-109354.md)
  `CVE-2026-109354` · CVE record: librenms librenms · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Path](https://agentprime.io/advisories/CVE-2026-109309.md)
  `CVE-2026-109309` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script](https://agentprime.io/advisories/CVE-2026-109274.md)
  `CVE-2026-109274` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [FreeRDP before 3.32.0 Path Traversal via Clipboard cFileName](https://agentprime.io/advisories/CVE-2026-109247.md)
  `CVE-2026-109247` · CVE record: FreeRDP FreeRDP · CVSS 2.1 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio](https://agentprime.io/advisories/CVE-2026-85953.md)
  `CVE-2026-85953` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal, Privilege escalation
- [Path traversal in rebar3 via unvalidated dependency app names](https://agentprime.io/advisories/CVE-2026-103060.md)
  `CVE-2026-103060` · CVE record: erlang rebar3 · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Path traversal in Hex via unvalidated dependency app names](https://agentprime.io/advisories/CVE-2026-96612.md)
  `CVE-2026-96612` · CVE record: hexpm hex · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName](https://agentprime.io/advisories/CVE-2026-105081.md)
  `CVE-2026-105081` · CVE record: ImageMagick ImageMagick · CVSS 2.0 Low · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService](https://agentprime.io/advisories/CVE-2026-93695.md)
  `CVE-2026-93695` · CVE record: Progress ShareFile Storage Zones Controller · CVSS 7.4 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory](https://agentprime.io/advisories/CVE-2026-78355.md)
  `CVE-2026-78355` · CVE record: OTRS GmbH (former OTRS AG) OTRS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Path traversal in Samsung Mobile Smart Switch](https://agentprime.io/advisories/CVE-2026-21137.md)
  `CVE-2026-21137` · CVE record: Samsung Mobile Smart Switch · CVSS 5.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Path traversal in Samsung Mobile Samsung Flow](https://agentprime.io/advisories/CVE-2026-21133.md)
  `CVE-2026-21133` · CVE record: Samsung Mobile Samsung Flow · CVSS 5.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution](https://agentprime.io/advisories/CVE-2026-87690.md)
  `CVE-2026-87690` · CVE record: Rapid7 Metasploit Framework · CVSS 8.8 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [westboy CicadasCMS Template Management input TemplateController.input path traversal](https://agentprime.io/advisories/CVE-2026-108791.md)
  `CVE-2026-108791` · CVE record: westboy CicadasCMS · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal](https://agentprime.io/advisories/CVE-2026-108790.md)
  `CVE-2026-108790` · CVE record: westboy CicadasCMS · CVSS 5.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/tag/path-traversal.md>
Older: <https://agentprime.io/advisories/tag/path-traversal.md?cursor=WyIyMDI2LTEwLTEyVDAyOjMwOjE3LjExMzAwMFoiLCJDVkUtMjAyNi0xMDg3OTAiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=path-traversal&cursor=WyIyMDI2LTEwLTEzVDE4OjUwOjE0Ljc2NzAwMFoiLCJDVkUtMjAyNi0xMTAyMzIiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/path-traversal/?cursor=WyIyMDI2LTEwLTEzVDE4OjUwOjE0Ljc2NzAwMFoiLCJDVkUtMjAyNi0xMTAyMzIiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.