# Path traversal. File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [phpMyAdmin MoTranslator Loader.php getTranslator path traversal](https://agentprime.io/advisories/CVE-2026-121263.md) `CVE-2026-121263` · CVE record: phpMyAdmin MoTranslator · CVSS 5.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion](https://agentprime.io/advisories/CVE-2026-115294.md) `CVE-2026-115294` · CVE record: Elastic Kibana · CVSS 7.3 High · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory](https://agentprime.io/advisories/CVE-2026-103916.md) `CVE-2026-103916` · CVE record: Docker Docker Sandboxes · CVSS 8.4 High · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [mongofiles may write outside the working directory through a symlink](https://agentprime.io/advisories/CVE-2026-119673.md) `CVE-2026-119673` · CVE record: MongoDB Database Tools · CVSS 1.0 Low · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [mongofiles may disclose GridFS content to standard output through a stored filename](https://agentprime.io/advisories/CVE-2026-119672.md) `CVE-2026-119672` · CVE record: MongoDB Database Tools · CVSS 5.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows](https://agentprime.io/advisories/CVE-2026-97350.md) `CVE-2026-97350` · CVE record: Securepoint Securepoint SSL VPN Client v2 · CVSS 6.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal, Command injection - [nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling](https://agentprime.io/advisories/CVE-2026-121550.md) `CVE-2026-121550` · CVE record: jarun nnn · CVSS 1.0 Low · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following](https://agentprime.io/advisories/CVE-2026-121546.md) `CVE-2026-121546` · CVE record: Novik ruTorrent · CVSS 6.0 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers](https://agentprime.io/advisories/CVE-2026-121544.md) `CVE-2026-121544` · CVE record: koodo-reader koodo-reader · CVSS 6.9 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint](https://agentprime.io/advisories/CVE-2026-121453.md) `CVE-2026-121453` · CVE record: dataease SQLBot · CVSS 5.1 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Dockhand before 1.0.54 Path Traversal via Stack Environment Routes](https://agentprime.io/advisories/CVE-2026-121448.md) `CVE-2026-121448` · CVE record: Finsys dockhand · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Path traversal in vivo BlueLM Copilot](https://agentprime.io/advisories/CVE-2026-89229.md) `CVE-2026-89229` · CVE record: vivo BlueLM Copilot · CVSS 5.1 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Improper limitation of paths in py-aspect-model-loader](https://agentprime.io/advisories/CVE-2026-92610.md) `CVE-2026-92610` · CVE record: Eclipse Foundation Eclipse Semantic Modeling Framework (ESMF) · No CVSS score · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter](https://agentprime.io/advisories/CVE-2026-120577.md) `CVE-2026-120577` · CVE record: wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler · CVSS 8.1 High · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal](https://agentprime.io/advisories/CVE-2026-120559.md) `CVE-2026-120559` · CVE record: satindersingh Contact Form Extender for Divi – Submissions DB & Extra Fields · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [Academy LMS <= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Route](https://agentprime.io/advisories/CVE-2026-120544.md) `CVE-2026-120544` · CVE record: kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning · CVSS 4.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler](https://agentprime.io/advisories/CVE-2026-120518.md) `CVE-2026-120518` · CVE record: kalengi BuddyPress XProfile Custom Image Field · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zip archive.](https://agentprime.io/advisories/CVE-2026-38600.md) `CVE-2026-38600` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal - [An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync endpoint.](https://agentprime.io/advisories/CVE-2026-38595.md) `CVE-2026-38595` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Path traversal, Command injection - [Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server](https://agentprime.io/advisories/CVE-2026-116635.md) `CVE-2026-116635` · CVE record: AWS aws-serverless-mcp-server · CVSS 6.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Symlink following in WebPros cPanel](https://agentprime.io/advisories/CVE-2026-105476.md) `CVE-2026-105476` · CVE record: WebPros cPanel · CVSS 8.8 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Path traversal in Google Android](https://agentprime.io/advisories/CVE-2026-59016.md) `CVE-2026-59016` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Path traversal in Google Android](https://agentprime.io/advisories/CVE-2026-49935.md) `CVE-2026-49935` · CVE record: Google Android · CVSS 4.0 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [psqlODBC log files are created with default permissions at a predictable path and follow symbolic links](https://agentprime.io/advisories/CVE-2026-120066.md) `CVE-2026-120066` · CVE record: PostgreSQL psqlODBC · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal, Broken access control - [Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir](https://agentprime.io/advisories/CVE-2026-81938.md) `CVE-2026-81938` · CVE record: Grafana Enterprise Metrics (GEM) and 1 more · CVSS 7.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor](https://agentprime.io/advisories/CVE-2026-73697.md) `CVE-2026-73697` · CVE record: Control Web Panel Control Web Panel · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal, Command injection - [GoFound through 1.4.1 Path Traversal via database parameter in /api/db/drop](https://agentprime.io/advisories/CVE-2026-120444.md) `CVE-2026-120444` · CVE record: sea-team GoFound · CVSS 7.2 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Path traversal in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-91903.md) `CVE-2026-91903` · CVE record: Dell OpenManage Enterprise · CVSS 6.1 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Path traversal in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-91910.md) `CVE-2026-91910` · CVE record: Dell OpenManage Enterprise · CVSS 5.7 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Path traversal in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-91911.md) `CVE-2026-91911` · CVE record: Dell OpenManage Enterprise · CVSS 6.1 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape](https://agentprime.io/advisories/CVE-2026-117518.md) `CVE-2026-117518` · CVE record: @fastify/reply-from @fastify/reply-from · CVSS 8.2 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [@fastify/http-proxy vulnerable to prefix escape via decoded route parameters](https://agentprime.io/advisories/CVE-2026-120213.md) `CVE-2026-120213` · CVE record: @fastify/http-proxy @fastify/http-proxy · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal, CWE-436 - [@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments](https://agentprime.io/advisories/CVE-2026-120214.md) `CVE-2026-120214` · CVE record: @fastify/http-proxy @fastify/http-proxy · CVSS 5.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal](https://agentprime.io/advisories/CVE-2026-120335.md) `CVE-2026-120335` · CVE record: deepset-ai farm · CVSS 2.4 Low · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal](https://agentprime.io/advisories/CVE-2026-120334.md) `CVE-2026-120334` · CVE record: deepset-ai farm · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Webpro-nl Knip Workspace IssueFixer.ts writeFile path traversal](https://agentprime.io/advisories/CVE-2026-120325.md) `CVE-2026-120325` · CVE record: Webpro-nl Knip · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversal](https://agentprime.io/advisories/CVE-2026-120324.md) `CVE-2026-120324` · CVE record: Aklivity Zilla · CVSS 6.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution](https://agentprime.io/advisories/CVE-2026-120316.md) `CVE-2026-120316` · CVE record: http4k http4k · CVSS 8.2 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile](https://agentprime.io/advisories/CVE-2026-120315.md) `CVE-2026-120315` · CVE record: lobehub chat · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath](https://agentprime.io/advisories/CVE-2026-120313.md) `CVE-2026-120313` · CVE record: Jovancoding Network-AI · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name](https://agentprime.io/advisories/CVE-2026-120312.md) `CVE-2026-120312` · CVE record: Jovancoding Network-AI · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID](https://agentprime.io/advisories/CVE-2026-120311.md) `CVE-2026-120311` · CVE record: Jovancoding Network-AI · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [Termix-SSH Termix transferToHost path traversal](https://agentprime.io/advisories/CVE-2026-120322.md) `CVE-2026-120322` · CVE record: Termix-SSH Termix · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Path traversal - [WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability](https://agentprime.io/advisories/CVE-2026-119480.md) `CVE-2026-119480` · CVE record: Crocoblock JetFormBuilder · CVSS 6.5 Medium · Not analysed yet · Published 1 Nov 2026 · Tags: Path traversal - [Beta9 host filesystem exposure via volume path traversal](https://agentprime.io/advisories/CVE-2026-120308.md) `CVE-2026-120308` · CVE record: beam-cloud Beta9 gateway and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2026 · Tags: Path traversal, Information disclosure - [Beta9 container escape via unvalidated sandbox file paths](https://agentprime.io/advisories/CVE-2026-120307.md) `CVE-2026-120307` · CVE record: beam-cloud Beta9 worker · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2026 · Tags: Path traversal - [Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal](https://agentprime.io/advisories/CVE-2026-120225.md) `CVE-2026-120225` · CVE record: Oray Pugongying X5 Pro · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2026 · Tags: Path traversal - [FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path](https://agentprime.io/advisories/CVE-2026-120210.md) `CVE-2026-120210` · CVE record: FFmpeg FFmpeg · CVSS 5.3 Medium · Not analysed yet · Published 31 Oct 2026 · Tags: Path traversal - [DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter](https://agentprime.io/advisories/CVE-2026-120204.md) `CVE-2026-120204` · CVE record: deepseek-ai DeepInfer · CVSS 6.3 Medium · Not analysed yet · Published 31 Oct 2026 · Tags: Path traversal - [WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback](https://agentprime.io/advisories/CVE-2026-78189.md) `CVE-2026-78189` · CVE record · No CVSS score · Not analysed yet · Published 31 Oct 2026 · Tags: Path traversal - [epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install](https://agentprime.io/advisories/CVE-2026-118599.md) `CVE-2026-118599` · CVE record: GNOME Epiphany · CVSS 5.5 Medium · Not analysed yet · Published 31 Oct 2026 · Tags: Path traversal - [Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameter](https://agentprime.io/advisories/CVE-2026-103882.md) `CVE-2026-103882` · CVE record: acadlix Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Oct 2026 · Tags: Path traversal - [Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter](https://agentprime.io/advisories/CVE-2026-110251.md) `CVE-2026-110251` · CVE record: villatheme Revopic – Photo Reviews for WooCommerce · CVSS 5.4 Medium · Not analysed yet · Published 31 Oct 2026 · Tags: Path traversal - [BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion](https://agentprime.io/advisories/CVE-2026-118437.md) `CVE-2026-118437` · CVE record: Unknown BuddyForms · CVSS 3.7 Low · Not analysed yet · Published 31 Oct 2026 · Tags: Path traversal - [Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path Traversal](https://agentprime.io/advisories/CVE-2026-118043.md) `CVE-2026-118043` · CVE record: Unknown Bulk Media Register · CVSS 7.2 High · Not analysed yet · Published 31 Oct 2026 · Tags: Path traversal - [Nuxt dev server arbitrary file read through client error reports](https://agentprime.io/advisories/GHSA-x287-wcfc-q46c.md) `GHSA-x287-wcfc-q46c`, `CVE-2026-119198` · npm `@nuxt/vite-builder`: affected `>=4.6.0, <4.6.3`, fixed in `4.6.3` · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal - [MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files](https://agentprime.io/advisories/GHSA-fhx5-2xqw-2cgm.md) `GHSA-fhx5-2xqw-2cgm`, `CVE-2026-119210` · Maven `org.mariadb.jdbc:mariadb-java-client`: affected `>=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.11`, fixed in `3.3.7`, `3.4.5`, `3.5.11` · CVSS 5.9 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal, CWE-20 - [Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution](https://agentprime.io/advisories/GHSA-4xm8-rg9h-jhq2.md) `GHSA-4xm8-rg9h-jhq2` · npm `@signalk/resources-provider` and 1 more: affected `>=1.0.0, <1.5.3`, fixed in `1.5.3` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal - [AdminNeo SQLite Database-List Drop Arbitrary File Deletion](https://agentprime.io/advisories/GHSA-6vfx-w7q3-42gq.md) `GHSA-6vfx-w7q3-42gq`, `CVE-2026-96633`, `PKSA-crwk-5zq2-p7sx` · Packagist `adminneo-org/adminneo`: affected `<5.5.1`, fixed in `5.5.1` · CVSS 8.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal - [sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites](https://agentprime.io/advisories/CVE-2026-61725.md) `CVE-2026-61725` · CVE record: hasenbanck sevenz-rust2 · CVSS 6.1 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Path traversal Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .