# Path traversal.

File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post](https://agentprime.io/advisories/CVE-2026-93851.md)
  `CVE-2026-93851` · CVE record: Mattermost Mattermost · CVSS 8.0 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net](https://agentprime.io/advisories/GHSA-4vjg-vx72-qq4g.md)
  `GHSA-4vjg-vx72-qq4g`, `CVE-2026-116673` · npm `systeminformation`: affected `<5.33.14`, fixed in `5.33.14` · CVSS 3.3 Low · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [gopass before 1.17.0 Path Traversal via fs Storage Prune and IsDir](https://agentprime.io/advisories/CVE-2026-118756.md)
  `CVE-2026-118756` · CVE record: gopasspw gopass · CVSS 6.7 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [CherryTree through 1.7.2 Local File Disclosure via Embedded-File Filename Path](https://agentprime.io/advisories/CVE-2026-118693.md)
  `CVE-2026-118693` · CVE record: giuspen cherrytree · CVSS 5.6 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker](https://agentprime.io/advisories/GHSA-9j6q-wvj5-jgjg.md)
  `GHSA-9j6q-wvj5-jgjg`, `CVE-2026-112912` · PyPI `filelock`: affected `>=3.32.6, <4.2.1`, fixed in `4.2.1` · CVSS 2.5 Low · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [filelock: ReadWriteLock follows a symlink at the lock path into SQLite](https://agentprime.io/advisories/GHSA-j8f7-rjxc-mr56.md)
  `GHSA-j8f7-rjxc-mr56`, `CVE-2026-112936` · PyPI `filelock`: affected `>=3.20.4, <4.0.9`, fixed in `4.0.9` · CVSS 6.1 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal, Information disclosure
- [LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests](https://agentprime.io/advisories/GHSA-3fx2-cqw9-xr3c.md)
  `GHSA-3fx2-cqw9-xr3c`, `CVE-2026-118667` · PyPI `langgraph` and 1 more: affected `>=1.2.3, <1.2.14`, fixed in `1.2.14` · CVSS 4.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Echo static file middleware route protection bypass via encoded dot-dot traversal](https://agentprime.io/advisories/GHSA-3pmx-cf9f-34xr.md)
  `GHSA-3pmx-cf9f-34xr`, `CVE-2026-118654`, `GO-2026-6881` · Go `github.com/labstack/echo/v4` and 1 more: affected `<4.16.0`, fixed in `4.16.0` · CVSS 5.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [mcp-sanitizer: File Path Sanitizer Permits Arbitrary User-Home Absolute Paths](https://agentprime.io/advisories/GHSA-7w82-6f9j-v9jp.md)
  `GHSA-7w82-6f9j-v9jp` · npm `mcp-sanitizer`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS](https://agentprime.io/advisories/CVE-2026-63190.md)
  `CVE-2026-63190` · CVE record: fearlessgeekmedia FearlessCMS · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal, Cross-site scripting (XSS), Information disclosure, Authentication bypass
- [SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias](https://agentprime.io/advisories/CVE-2026-118680.md)
  `CVE-2026-118680` · CVE record: siyuan-note siyuan · CVSS 5.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Path traversal in Sophos SG UTM](https://agentprime.io/advisories/CVE-2026-118633.md)
  `CVE-2026-118633` · CVE record: Sophos SG UTM · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [MIME::Parser::FileUnder versions before 5.521 for Perl reuse a pre-created output directory and follow symlinks in it, letting local users redirect attachment writes](https://agentprime.io/advisories/CVE-2026-116271.md)
  `CVE-2026-116271` · CVE record · CVSS 7.0 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-118619.md)
  `CVE-2026-118619` · CVE record: Ultralytics Ultralytics · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Path traversal in Jenkins](https://agentprime.io/advisories/CVE-2026-117626.md)
  `CVE-2026-117626` · CVE record: Jenkins Project Jenkins · CVSS 4.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Symlink following in Jenkins](https://agentprime.io/advisories/CVE-2026-117617.md)
  `CVE-2026-117617` · CVE record: Jenkins Project Jenkins · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Symlink following in Jenkins](https://agentprime.io/advisories/CVE-2026-117615.md)
  `CVE-2026-117615` · CVE record: Jenkins Project Jenkins · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management](https://agentprime.io/advisories/CVE-2026-103407.md)
  `CVE-2026-103407` · CVE record: Juniper Networks Session Smart Router and 1 more · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root](https://agentprime.io/advisories/CVE-2026-103401.md)
  `CVE-2026-103401` · CVE record: Juniper Networks Session Smart Router and 1 more · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Path Traversal in Wing WFTP Server leading to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-105420.md)
  `CVE-2026-105420` · CVE record: Wing Soft Technology Wing FTP Server · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Path Traversal in Telerik Document Processing Libraries AI Agent Tools](https://agentprime.io/advisories/CVE-2026-118038.md)
  `CVE-2026-118038` · CVE record: Progress Software Telerik Document Processing Libraries · CVSS 7.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Axel Download Accelerator Path Traversal via URL Filename Decoding](https://agentprime.io/advisories/CVE-2026-118485.md)
  `CVE-2026-118485` · CVE record: Axel Download Accelerator Axel · CVSS 7.0 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Norton, Avast, and AVG local privilege escalation via link following in Data Shredder](https://agentprime.io/advisories/CVE-2026-6064.md)
  `CVE-2026-6064` · CVE record: Gen Digital Norton Antivirus and 2 more · CVSS 7.3 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Path traversal in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-86383.md)
  `CVE-2026-86383` · CVE record: Dell PowerProtect Data Domain · CVSS 6.8 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Path traversal in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-86388.md)
  `CVE-2026-86388` · CVE record: Dell PowerProtect Data Domain · CVSS 5.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS](https://agentprime.io/advisories/CVE-2026-105457.md)
  `CVE-2026-105457` · CVE record: HAVELSAN Inc. Liman MYS · CVSS 6.5 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Path traversal in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-86398.md)
  `CVE-2026-86398` · CVE record: Dell PowerProtect Data Domain · CVSS 8.8 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Path traversal in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-90721.md)
  `CVE-2026-90721` · CVE record: Dell PowerProtect Data Domain · CVSS 3.4 Low · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Tainacan <= 1.3.0 - Authenticated (Editor+) Path Traversal to Arbitrary File Read via 'tmp_file' Parameter via Mass Assignment](https://agentprime.io/advisories/CVE-2026-104743.md)
  `CVE-2026-104743` · CVE record: tainacan Tainacan · CVSS 4.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages\[\*\].image' Parameter in Cart JSON Upload](https://agentprime.io/advisories/CVE-2026-15323.md)
  `CVE-2026-15323` · CVE record: King-Theme Product Designer for WooCommerce WordPress | Lumise · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [AI Engine <= 3.8.4 - Authenticated (Subscriber+) Limited Media File Deletion via 'metadata' Parameter](https://agentprime.io/advisories/CVE-2026-107745.md)
  `CVE-2026-107745` · CVE record: tigroumeow AI Engine – MCP Server & AI Chatbot for WordPress, with Claude, ChatGPT & Gemini · CVSS 4.2 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Path traversal
- [GRR vulnerable to Arbitrary File Read and Deletion](https://agentprime.io/advisories/CVE-2026-58257.md)
  `CVE-2026-58257` · CVE record: JeromeDevome GRR · CVSS 7.2 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source](https://agentprime.io/advisories/GHSA-m65p-9j7q-6w33.md)
  `GHSA-m65p-9j7q-6w33`, `CVE-2026-116690` · PyPI `mlflow`: affected `>=3.10.0, <3.17.0`, fixed in `3.17.0` · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE](https://agentprime.io/advisories/CVE-2026-57200.md)
  `CVE-2026-57200` · CVE record: asterisk asterisk and 1 more · CVSS 7.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, Broken access control
- [FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory](https://agentprime.io/advisories/GHSA-mgqf-5mf5-prfj.md)
  `GHSA-mgqf-5mf5-prfj`, `CVE-2026-116682`, `GO-2026-6870` · Go `github.com/gtsteffaniak/filebrowser/backend`: affected `<0.0.0-20260814233832-4126edeb07a0`, fixed in `0.0.0-20260814233832-4126edeb07a0` · CVSS 8.6 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Sunhillo SureLine Path Traversal via radarUpdater.cgi](https://agentprime.io/advisories/CVE-2026-112350.md)
  `CVE-2026-112350` · CVE record: Sunhillo Corporation SureLine · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Tanium addressed a local privilege escalation vulnerability in End-User Notifications.](https://agentprime.io/advisories/CVE-2026-108306.md)
  `CVE-2026-108306` · CVE record: Tanium Endpoint Configuration Toolset Solution and 1 more · CVSS 7.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.](https://agentprime.io/advisories/CVE-2026-108332.md)
  `CVE-2026-108332` · CVE record: Tanium Endpoint Configuration Toolset Solution and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Tanium addressed a local privilege escalation vulnerability in End-User Notifications.](https://agentprime.io/advisories/CVE-2026-108304.md)
  `CVE-2026-108304` · CVE record: Tanium Endpoint Configuration Toolset Solution and 1 more · CVSS 7.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, CWE-282
- [Tanium addressed a local privilege escalation vulnerability in End-User Notifications.](https://agentprime.io/advisories/CVE-2026-108305.md)
  `CVE-2026-108305` · CVE record: Tanium Endpoint Configuration Toolset Solution and 1 more · CVSS 7.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Path traversal in Veeam Backup and Replication](https://agentprime.io/advisories/CVE-2026-108141.md)
  `CVE-2026-108141` · CVE record: Veeam Backup and Replication · CVSS 5.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Path traversal in Veeam Backup and Replication](https://agentprime.io/advisories/CVE-2026-108140.md)
  `CVE-2026-108140` · CVE record: Veeam Backup and Replication · CVSS 5.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root](https://agentprime.io/advisories/CVE-2026-90464.md)
  `CVE-2026-90464` · CVE record: WatchGuard Fireware OS · CVSS 7.2 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, Broken access control
- [Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root](https://agentprime.io/advisories/CVE-2026-93864.md)
  `CVE-2026-93864` · CVE record: WatchGuard Fireware OS · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, CWE-377
- [Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal](https://agentprime.io/advisories/CVE-2026-117510.md)
  `CVE-2026-117510` · CVE record: Dexmal Dexbotic · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage](https://agentprime.io/advisories/GHSA-3w55-933p-8pv5.md)
  `GHSA-3w55-933p-8pv5` · PyPI `strands-agents`: affected `<1.48.0`, fixed in `1.48.0` · CVSS 7.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [LiteLLM: internal_user_viewer arbitrary local file read via \`vertex_ai_credentials\`](https://agentprime.io/advisories/GHSA-g5ff-637f-6q2m.md)
  `GHSA-g5ff-637f-6q2m` · PyPI `litellm`: affected `<1.95.0`, fixed in `1.95.0` · CVSS 8.1 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, CWE-20
- [crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor.\_decompress path traversal](https://agentprime.io/advisories/CVE-2026-117509.md)
  `CVE-2026-117509` · CVE record: crownpku Rasa_NLU_Chi · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [GitPython: arbitrary file read via attacker-controlled branch name in \`Head.checkout()\` (incomplete fix of CVE-2026-78679)](https://agentprime.io/advisories/GHSA-23mf-xhv8-69c2.md)
  `GHSA-23mf-xhv8-69c2`, `CVE-2026-110859` · PyPI `gitpython`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal, Command injection, Information disclosure
- [GitPython: Submodule.move() follows an attacker-committed intermediate symlink outside the worktree](https://agentprime.io/advisories/GHSA-gq48-pqfc-9p58.md)
  `GHSA-gq48-pqfc-9p58`, `CVE-2026-110860` · PyPI `gitpython`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [NLTK: WekaClassifier passes an unvalidated caller-controlled model path to the weka JVM, bypassing nltk.pathsec containment](https://agentprime.io/advisories/GHSA-j456-xh4h-cpf2.md)
  `GHSA-j456-xh4h-cpf2`, `CVE-2026-109956` · PyPI `nltk`: affected `<3.10.4`, fixed in `3.10.4` · CVSS 8.3 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs](https://agentprime.io/advisories/GHSA-qr6x-7v33-6qmg.md)
  `GHSA-qr6x-7v33-6qmg`, `CVE-2026-115924` · PyPI `rembg`: affected `<2.0.82`, fixed in `2.0.82` · CVSS 8.6 High · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Path traversal in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-68866.md)
  `CVE-2026-68866` · CVE record: Dell PowerProtect Data Domain · CVSS 6.5 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Path traversal in Dell PowerProtect Data Domain](https://agentprime.io/advisories/CVE-2026-90727.md)
  `CVE-2026-90727` · CVE record: Dell PowerProtect Data Domain · CVSS 3.8 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [Path traversal in Octopus Deploy Octopus Server](https://agentprime.io/advisories/CVE-2026-12887.md)
  `CVE-2026-12887` · CVE record: Octopus Deploy Octopus Server · CVSS 5.1 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php](https://agentprime.io/advisories/CVE-2026-117566.md)
  `CVE-2026-117566` · CVE record: icret EasyImages2.0 · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Path traversal
- [YesWiki before 4.7.0 Template Traversal via BazarListeAction template Parameter](https://agentprime.io/advisories/CVE-2026-116822.md)
  `CVE-2026-116822` · CVE record: YesWiki yeswiki · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Path traversal
- [WWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language Header](https://agentprime.io/advisories/CVE-2026-116800.md)
  `CVE-2026-116800` · CVE record: WWBN AVideo · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Path traversal
- [SourceCodester Online Food Ordering System delete.php unlink path traversal](https://agentprime.io/advisories/CVE-2026-116602.md)
  `CVE-2026-116602` · CVE record: SourceCodester Online Food Ordering System · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Path traversal
- [Subpath symlinking on Windows nodes permits NTLM coercion](https://agentprime.io/advisories/CVE-2026-76654.md)
  `CVE-2026-76654` · CVE record: Kubernetes Kubernetes · CVSS 5.8 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/tag/path-traversal.md>
Older: <https://agentprime.io/advisories/tag/path-traversal.md?cursor=WyIyMDI2LTEwLTI2VDIyOjI5OjIzLjk0NDAwMFoiLCJDVkUtMjAyNi03NjY1NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=path-traversal&cursor=WyIyMDI2LTEwLTI4VDIyOjMwOjU5LjY5MzAwMFoiLCJDVkUtMjAyNi03NTUyMCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/path-traversal/?cursor=WyIyMDI2LTEwLTI4VDIyOjMwOjU5LjY5MzAwMFoiLCJDVkUtMjAyNi03NTUyMCJd>. Everything for agents: <https://agentprime.io/llms.txt>.