Path traversal.

bazylhorsey obsidian-mcp-server CanvasService.ts writeCanvas path traversal

• bazylhorsey obsidian-mcp-server
• Path traversal

Path Traversal Vulnerability in parisneo/lollms

• parisneo/lollms
• Path traversal

angrysky56 advanced-reasoning-mcp index.ts switch_memory_library path traversal

• angrysky56 advanced-reasoning-mcp
• Path traversal

aktsmm skill-ninja-mcp-server installer.ts uninstallSkill path traversal

• aktsmm skill-ninja-mcp-server
• Path traversal

abracadabra50 claude-sesh enricher.ts enrichSession path traversal

• abracadabra50 claude-sesh
• Path traversal

Jevon-Zhong Ai-doctor filemanagement.service.ts deleteImage path traversal

• Jevon-Zhong Ai-doctor
• Path traversal

IncomeStreamSurfer roo-code-memory-bank-mcp-server read_memory_bank_file/append_memory_bank_entry index.ts appendMemoryBankEntry path traversal

• IncomeStreamSurfer roo-code-memory-bank-mcp-server
• Path traversal

HelloGGX shadcn-vue-mcp callback-server.ts fs.promises.readFile path traversal

• HelloGGX shadcn-vue-mcp
• Path traversal

azer react-analyzer-mcp analyze-projec index.ts generateProjectDocs path traversal

• azer react-analyzer-mcp
• Path traversal

astralisone rive-mcp-server-core importRiveFile Flow importRiveFile.ts path traversal

• astralisone rive-mcp-server-core
• Path traversal

abrinsmead mindpilot-mcp HistoryService path traversal

• abrinsmead mindpilot-mcp
• Path traversal

aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal

• aaronsb memory-graph
• Path traversal

Hulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal

• Hulupeep mcp-ui-probe
• Path traversal

AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription

• AI Engine
• Path traversal

Kata Containers: Config Path Annotation Arbitrary File Loading

• kata-containers
• Path traversal
• CWE-20

Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read

• aehrc pathling
• Path traversal

Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}

• aehrc pathling
• Path traversal
• Server-side request forgery (SSRF)

Authorization bypass for session deletion in the transaction API

• HashiCorp Consul
• HashiCorp Consul Enterprise
• Path traversal

File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files

• RRWO File::Rotate::Simple
• Path traversal

CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames

• Path traversal

<4.7.4 · fixed in 4.7.4

go-git: Malicious reference names may modify files outside the reference storage

• Path traversal

<5.19.2 · fixed in 5.19.2

go-git: Worktree operations may follow symlinks

• Path traversal

<5.19.2 · fixed in 5.19.2

GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

• Path traversal

<3.1.58 · fixed in 3.1.58

GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()

• Path traversal
• Information disclosure

<3.1.58 · fixed in 3.1.58

Smarty Security stream restriction bypass through stream: resource

• Path traversal

>=5.0.0, <5.8.4 · fixed in 5.8.4

Smarty: Symlink path traversal out of trusted directories

• Path traversal
• CWE-61

<4.5.7 || >=5.0.0, <5.8.2 · fixed in 4.5.7, 5.8.2

Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover

• gitroomhq postiz-app
• Path traversal

Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1

• seblod.com SEBLOD extension for Joomla
• Path traversal

Path traversal in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others

• Dell OpenManage Server Administrator Managed Node (Patch) for Windows
• Dell OpenManage Server Administrator Managed Node for RHEL 8.10
• Path traversal

TeamDavid: Path Traversal in the archive creation functionality

• Tobit Laboratories AG TeamDavid
• Path traversal

TeamDavid: Local File Inclusion via the form field 'scjob'

• Tobit Laboratories AG TeamDavid
• Path traversal

TeamDavid: Arbitrary File Deletion via form field 'scjob'

• Tobit Laboratories AG TeamDavid
• Path traversal

Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3

• phoca.cz Phoca Commander extension for Joomla
• Path traversal

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3

• phoca.cz Phoca Commander extension for Joomla
• Path traversal

Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3

• phoca.cz Phoca Commander extension for Joomla
• Path traversal

WP Maps < 4.9.7 - Subscriber+ Local File Inclusion

• WP Maps
• Path traversal

Application Insights Profiler Elevation of Privilege Vulnerability

• Microsoft Application Insights Profiler
• Path traversal

Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

• Microsoft Entra Provisioning Service
• Path traversal

Craft CMS: Incorrect path validation could potentially lead to path traversal

• Path traversal

>=4.0.0-RC1, <4.18.2 || >=5.0.0-RC1, <5.10.6 · fixed in 4.18.2, 5.10.6

Nx: Zip-Slip in the self-hosted remote cache

• Path traversal

>=20.8.0, <22.7.7 || >=23.0.0, <23.0.2 · fixed in 22.7.7, 23.0.2

Contao: Possible path traversal in job download URIs

• Path traversal

>=5.7.0, <5.7.7 · fixed in 5.7.7

Arbitrary Root File Write via Path Traversal in BOSH agent

• CloudFoundry Foundation BOSH
• Path traversal

Anki's local HTTP server is vulnerable to directory traversal attacks

• anki
• Path traversal

Traefik: Authentication Bypass via Path Traversal in ReplacePathRegex Middleware

• Path traversal

<=1.7.34 · no fixed version yet

Traefik: Kubernetes Ingress NGINX RewriteTarget Path Traversal Allows Route-Level Authentication Bypass

• Path traversal
• Authentication bypass

>=3.7.0, <3.7.8 · fixed in 3.7.8

FoundationAgents MetaGPT editor.py read path traversal

• FoundationAgents MetaGPT
• Path traversal

Lspace-io lspace-server Repositories File API repository.ts deleteFile path traversal

• Lspace-io lspace-server
• Path traversal

@fastify/static vulnerable to route guard bypass via non-canonical path segments

• @fastify/static
• Path traversal
• CWE-436

NocteDefensor LudusMCP ludus_environment_guides_search ludusEnvironmentGuidesSearch.ts path traversal

• NocteDefensor LudusMCP
• Path traversal

WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability

• BoldGrid W3 Total Cache
• Path traversal

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.14 - Arbitrary File Download vulnerability

• Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
• Path traversal

OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter

• Bohdan Triapitsyn OpenChamber
• Path traversal

MonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversal

• MonomythDevelopment la-forge-mcp
• Path traversal

TinyAGI agents.ts buildSystemPrompt file inclusion

• TinyAGI
• Path traversal

TinyAGI Message API Endpoint response.ts collectFiles file inclusion

• TinyAGI
• Path traversal

mf-yang openclaw-cn apply_patch Tool sandbox-paths.ts assertNoSymlinkEscape link following

• mf-yang openclaw-cn
• Path traversal

Drag and Drop Multiple File Upload for WooCommerce < 1.1.8 - Unauthenticated File Deletion via Nonce Oracle

• Drag and Drop Multiple File Upload for WooCommerce
• Path traversal

nanocoai NanoClaw send_file core.ts path traversal

• nanocoai NanoClaw
• Path traversal

rclone: Local Encoding Path Traversal

• Path traversal

>=1.51.0, <1.75.0 · fixed in 1.75.0

rclone archive extract allows S3 destination prefix escape via crafted archive paths

• Path traversal

<1.74.4 · fixed in 1.74.4