Path traversal.

Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components

• IBM Langflow OSS
• Path traversal

Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components

• IBM Langflow OSS
• Path traversal

Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components

• IBM Langflow OSS
• Path traversal

Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components

• IBM Langflow OSS
• Path traversal

Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components

• IBM Langflow OSS
• Path traversal

Langflow is vulnerable to arbitrary local file read due to path traversal in ChatInput, bundle FileInput, and GitExtractor components

• IBM Langflow OSS
• Path traversal

Plandex 2.2.1 Path Traversal via ApplyFiles

• plandex
• Path traversal

surya 0.22.1 Unauthenticated Arbitrary File Read via screenshot server

• datalab-to surya
• Path traversal

AgentScope through 2.0.7.post1 Arbitrary Directory Copy via add_skill

• agentscope
• Path traversal

marker through 2.0.0 Path Traversal via upload filename

• datalab-to marker
• Path traversal

Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register

• xorbitsai inference
• Path traversal

Bruno through 4.1.0 Arbitrary File Read via Unconfined Body File Path

• bruno
• Path traversal

excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode

• haris-musa excel-mcp-server
• Path traversal

ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives

• C4illin ConvertX
• Path traversal

firecrawl-mcp-server 3.20.2 Arbitrary Local File Read via filePath

• firecrawl-mcp-server
• Path traversal

Langflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing components

• IBM Langflow OSS
• Path traversal

GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler

• GFI Software GFI Exinda AI
• GFI Software GFI ClearView
• Path traversal

GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler

• GFI Software GFI Exinda AI
• GFI Software GFI ClearView
• Path traversal

Grav Admin Plugin Path Traversal via Save As Language Code

• grav
• Path traversal

SiYuan before v3.8.2 Path Traversal via symlink in file API

• siyuan
• Path traversal

SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch

• siyuan
• Path traversal

Arbitrary File Read in Google Agent Development Kit (ADK)

• Google Cloud Agent Development Kit (ADK)
• Path traversal

WPvivid Backup & Migration < 0.9.134 - Admin+ Arbitrary File Deletion via Path Traversal

• WPvivid — Backup, Migration & Staging
• Path traversal

WPvivid Backup & Migration < 0.9.134 - Admin+ File Write Outside the Backup Directory via Path Traversal

• WPvivid — Backup, Migration & Staging
• Path traversal

Frontend Admin by DynamiApps < 3.29.13 - Unauthenticated .htaccess and index.php Deletion via Custom Directory Path Traversal

• Frontend Admin by DynamiApps
• Path traversal

Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal

• Eleveo Quality Management
• Path traversal

An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to delete arbitrary files via crafted POST request.

• Path traversal

Path traversal in WebPros Plesk

• WebPros Plesk
• Path traversal

MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows

• moos-ivp
• Path traversal

rubyzip path traversal vulnerability

• Path traversal

<3.4.0 · fixed in 3.4.0

parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject

• domainaware parsedmarc
• Path traversal

SiYuan: Path Traversal via unvalidated avID in RenderAttributeView/AV read endpoints : reader-reachable cross-scope attribute-view disclosure

• Path traversal

<0.0.0-20260720151813-0f5a0e7c67b0 · fixed in 0.0.0-20260720151813-0f5a0e7c67b0

VictoriaMetrics vmrestore: Path traversal via crafted backup part names escapes restore root

• Path traversal

<1.122.25 || >=1.123.0, <1.136.12 || >=1.137.0, <1.146.0 · fixed in 1.122.25, 1.136.12, 1.146.0

OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool

• Path traversal

<4.2.3 · fixed in 4.2.3

SiYuan: path traversal via /export/temp/ short-circuit branch (incomplete fix for the export-disclosure hardening, GHSA-6865-qjcf-286f)

• Path traversal

<0.0.0-20260510110132-b763d787d1f2 · fixed in 0.0.0-20260510110132-b763d787d1f2

DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid

• dbgate
• Path traversal

Path traversal in Eclipse Foundation Eclipse aeriOS

• Eclipse Foundation Eclipse aeriOS
• Path traversal
• CWE-206

AVideo through c91b5975d CSRF and Path Traversal via stopLive.php

• WWBN AVideo
• Path traversal

@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments

• @fastify/http-proxy
• Path traversal

LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following

• jtsylve LiME
• Path traversal

Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass

• Path traversal
• Information disclosure

<4.5.3 · fixed in 4.5.3

Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

• Path traversal

<0.3.0 · fixed in 0.3.0

Reader Tools PDF Reader App File ActSplashNew.handleDeeplink path traversal

• Reader Tools PDF Reader App
• Path traversal

Path traversal in Jenkins Project Jenkins File Parameter Plugin

• Jenkins Project Jenkins File Parameter Plugin
• Path traversal

Path traversal in Jenkins Project Jenkins Allure Plugin

• Jenkins Project Jenkins Allure Plugin
• Path traversal

Path traversal in Jenkins Project Jenkins ThinBackup Plugin

• Jenkins Project Jenkins ThinBackup Plugin
• Path traversal

Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks

• Red Hat Hardened Images
• Red Hat Enterprise Linux 10
• Path traversal

ApostropheCMS: Arbitrary file read via import-export attachment-name path traversal

• Path traversal

<3.6.2 · fixed in 3.6.2

Kirby: Access to image files outside of the site root via path traversal in the media handling

• Path traversal

<4.9.5 || >=5.0.0, <5.5.2 · fixed in 4.9.5, 5.5.2

Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

• Path traversal
• Server-side request forgery (SSRF)

<8.22.0 · fixed in 8.22.0

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion

• Elastic Kibana
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources

• Elastic Kibana
• Path traversal

Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal Resources

• Elastic Kibana
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory in Elastic Maps Server Leading to Unauthorized File Disclosure

• Elastic Maps Server
• Path traversal

Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

• Path traversal

<2.4.5 · fixed in 2.4.5

pnpm: Virtual store linker path traversal via unvalidated depPath name in lockfileToDepGraph

• Path traversal

<10.34.5 || >=11.0.0, <11.11.0 · fixed in 10.34.5, 11.11.0

pnpm: A tarball dependency's manifest `name` escapes node_modules → arbitrary file write/overwrite on install

• Path traversal
• Code injection

<10.34.5 || >=11.0.0, <11.11.0 · fixed in 10.34.5, 11.11.0

NLTK: Downloader.download follows hardlinks and overwrites outside-root files

• Path traversal
• CWE-61

<3.10.3 · fixed in 3.10.3

NLTK: Model-artifact APIs bypass pathsec and touch files outside allowed roots

• Path traversal

<3.10.4 · fixed in 3.10.4

humanfs: Recursive copy follows symlinked files and copies data from outside the source tree

• Path traversal

<0.16.8 · fixed in 0.16.8