Path traversal.

Cisco Crosswork Security Hardening Release: August 2026

• Cisco Crosswork Planning
• Path traversal

Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager

• wazuh
• Path traversal

Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager

• wazuh
• Path traversal

Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()

• wazuh
• Path traversal

Duplicate Advisory: GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()

• Path traversal

<=3.1.57 · no fixed version yet

Duplicate Advisory: GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython

• Path traversal

<=3.1.57 · no fixed version yet

tarfile extraction filter bypass allows creation of directories outside the destination

• Python Software Foundation CPython
• Path traversal

OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore

• openemr
• Path traversal

Symlink following in Dell Command Update (DCU)

• Dell Command Update (DCU)
• Path traversal

Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution

• sgoudelis ground-station
• Path traversal
• Code injection

Ground Station: Unauthenticated out-of-containment file read via `sigmfplayback` `recordingPath`

• sgoudelis ground-station
• Path traversal
• Information disclosure

SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write

• libfuse sshfs
• Path traversal

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Path traversal

phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export

• thorsten phpMyFAQ
• Path traversal

Path traversal in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Path traversal

W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key

• W3 Total Cache
• Path traversal

Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal

• Simple File List
• Path traversal

Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta

• wpfeedback Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback
• Path traversal

4gaBoards: Path Traversal leading to Arbitrary File Read and Deletion in Board Export

• RARgames 4gaBoards
• Path traversal

Streambert: Arbitrary Directory Creation and File Manipulation via Backup Handler

• truelockmc streambert
• Path traversal

Streambert: Local File Exfiltration and Overwrite via Subtitle file: Protocol

• truelockmc streambert
• Path traversal

Confidential Containers Guest Components image-rs: zip-slip-class arbitrary file write via absolute entry path in hardlink fallback

• confidential-containers guest-components
• Path traversal

linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

• Path traversal
• Privilege escalation

<6.1.0 · fixed in 6.1.0

moby/go-archive: Crafted tar archive can write outside the extraction directory

• Path traversal

<0.3.0 · fixed in 0.3.0

Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)

• Linuxfabrik monitoring-plugins
• Path traversal
• Privilege escalation

Blueprint Studio terminal command working directory not bounded to config directory

• ha-china blueprint-studio
• Path traversal

MineAdmin Vulnerable to Path Traversal via Unsanitized identifier in Plugin Install/Uninstall

• Path traversal

<3.2.0-alpha.2 · fixed in 3.2.0-alpha.2

Symlink following in Google Chrome

• Google Chrome
• Path traversal

Path traversal in NVIDIA Triton Inference Server

• NVIDIA Triton Inference Server
• Path traversal

Path traversal in NVIDIA Triton Inference Server

• NVIDIA Triton Inference Server
• Path traversal

Path traversal in NVIDIA Triton Inference Server

• NVIDIA Triton Inference Server
• Path traversal

MobSF Vulnerable to Arbitrary File Read via Path Traversal in ZIP Uploads

• Path traversal

<4.5.1 · fixed in 4.5.1

Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello

• wazuh-manager
• Path traversal

Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment

• wazuh-manager
• Path traversal

Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write

• Path traversal

<0.72.0 · fixed in 0.72.0

@rhinostone/swig: arbitrary local file read via include/extends path traversal

• Path traversal

<2.7.1 · fixed in 2.7.1

WordPress CTX Feed plugin <= 6.6.47 - Arbitrary File Download vulnerability

• WebAppick CTX Feed
• Path traversal

WordPress Extra Product Options & Add-Ons for WooCommerce plugin < 7.6 - Arbitrary File Download vulnerability

• ThemeComplete Extra Product Options & Add-Ons for WooCommerce
• Path traversal

DataEase has a Path Traversal Vulnerability

• dataease
• Path traversal

Duplicate Advisory: Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)

• Path traversal

* · no fixed version yet

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751

• Citrix WorkSpace App
• Path traversal

Path Traversal in AKIN Software's Wolvox9 ERP

• AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe
• Path traversal

ArcadeDB before 26.8.1 Path Traversal via create/drop database

• ArcadeData arcadedb
• Path traversal

ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV

• ArcadeData arcadedb
• Path traversal

grav-plugin-api before 1.0.15 Path Traversal via batchCopy

• grav
• Path traversal

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir(), and org.springframework.util.FileSystemUtils.copy…

• Path traversal

An arbitrary file write/directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to create or overwrite files anywhere on the filesystem subject to the permissions of the w…

• Path traversal

A directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to expose or execute arbitrary php files on the web server by specifying the filename in the target_format parame…

• Path traversal

chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots

• Path traversal

>=0.24.0, <1.1.0 · fixed in 1.1.0

JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset

• jumpserver
• Path traversal

OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php

• openemr
• Path traversal

SWE-agent Trajectory Inspector Path Traversal File Disclosure

• SWE-agent
• Path traversal

Evidently UI Path Traversal via Dataset Materialization Filename

• evidently
• Path traversal

Hugging Face Transformers Path Traversal via Checkpoint Index

• huggingface transformers
• Path traversal

Packer vulnerable to arbitrary file write via crafted plugin archive during installation

• HashiCorp Packer
• Path traversal

Notepad++: Path Traversal (Zip Slip) in WinGup Plugin Extraction

• notepad-plus-plus
• Path traversal

Notepad++: session.xml backupFilePath starts_with Bypass

• notepad-plus-plus
• Path traversal

Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling

• Path traversal
• Information disclosure

<3.3.0 · fixed in 3.3.0

uniget CLI has Path Traversal in Hook Files - Directory Escape Vulnerability

• Path traversal

<0.27.6 · fixed in 0.27.6

Terragrunt: Arbitrary File Deletion via Malicious Module Manifest

• Path traversal
• CWE-20

<1.0.4 · fixed in 1.0.4