Path traversal.

Windows Error Reporting Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Path traversal

Windows Compressed Folder Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Path traversal

Windows NTFS Tampering Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Path traversal

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Path traversal

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Path traversal

Visual Studio Code Tampering Vulnerability

• Microsoft Visual Studio Code
• Path traversal

Visual Studio Code Security Feature Bypass Vulnerability

• Microsoft Visual Studio Code
• Path traversal

Windows Shell Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Path traversal

Microsoft Exchange Server Remote Code Execution Vulnerability

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• Path traversal

Windows DNS Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Path traversal

Windows Shell Spoofing Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Path traversal

Windows Container Manager Service Security Feature Bypass Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Path traversal

Windows NTFS Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Path traversal

Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Path traversal
• Privilege escalation

Microsoft SQL Server Elevation of Privilege Vulnerability

• Microsoft SQL Server 2017 (CU 31)
• Microsoft SQL Server 2017 (GDR)
• Path traversal

Microsoft PowerShell Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Path traversal

NLTK: Corpus Reader Sandbox Bypass

• Path traversal

<3.10.3 · fixed in 3.10.3

NLTK: Corpus readers follow symlinks outside trusted roots despite pathsec enforcement

• Path traversal

<3.10.3 · fixed in 3.10.3

NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely

• Path traversal

>=3.10.0, <3.10.2 · fixed in 3.10.2

NLTK: Symlink-based sandbox bypass in FramenetCorpusReader (bypasses the fix for CVE-2026-54292)

• Path traversal

>=3.10.0, <3.10.2 · fixed in 3.10.2

NLTK: Stable FrameNet and NKJP readers parse outside-root XML

• Path traversal
• CWE-706

<3.10.0 · fixed in 3.10.0

NLTK: StreamBackedCorpusView Bypasses pathsec.ENFORCE - Arbitrary Local File Read

• Path traversal

<3.10.0 · fixed in 3.10.0

NLTK: Symlink escape in CorpusReader allows arbitrary local file read outside the corpus root

• Path traversal

<3.9.4 · fixed in 3.9.4

XenForo < 2.3.13 Path Traversal via Style Archive Importer on Windows

• XenForo
• Path traversal

CommServe Path Traversal

• Commvault Cloud
• Path traversal

DataCube Security Feature Bypass

• Commvault Cloud
• Path traversal

Gnome-tweaks: path traversal in theme installer

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Path traversal

Path traversal in Siemens SIMOVE Fleetmanager V3.1 and others

• Siemens SIMOVE Fleetmanager V3.1
• Siemens SIMOVE Fleetmanager V3.2
• Path traversal

Duplicate Advisory: Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools

• Path traversal

* · no fixed version yet

knowns before 0.30.0 Path Traversal via Import Name

• knowns
• Path traversal

knowns before 0.30.0 Path Traversal via code.replace MCP action

• knowns
• Path traversal

knowns before 0.30.0 Path Traversal via templateFile parameter

• knowns
• Path traversal

Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Path traversal

Path Traversal in Next4Biz's CSM (Customer Service Management)

• Next4Biz Information Technologies Inc. CSM (Customer Service Management)
• Path traversal

Path traversal in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Path traversal

Path traversal in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Path traversal

Path traversal in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Path traversal

ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race

• ImageMagick
• Path traversal

ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race

• ImageMagick
• Path traversal

Path traversal in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Path traversal

Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write

• Apache Software Foundation Apache Ant
• Path traversal

External control of a file path in OpenVPN

• OpenVPN
• Path traversal

Path traversal in OpenVPN

• OpenVPN
• Path traversal

Path traversal in MediaTek, Inc. MediaTek chipset

• MediaTek, Inc. MediaTek chipset
• Path traversal

nbviewer through 1.0.1 Path Traversal via LocalFileHandler

• jupyter nbviewer
• Path traversal

Unauthenticated file read in Mikrotik RouterOS

• Mikrotik RouterOS
• Path traversal
• Memory corruption

WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php

• WWBN AVideo
• Path traversal

Arbitrary file read via workspace confinement bypass in local-operator /v1/chat/agents/{id}/edit

• Path traversal
• Information disclosure

<0.47.5 · fixed in 0.47.5

Path traversal and arbitrary directory deletion/overwrite via agent profile import in local-operator

• Path traversal

<0.47.5 · fixed in 0.47.5

WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter

• JoomUnited WP File Download
• Path traversal

Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta

• Eventin
• Path traversal

JCH Optimize 4.2.1 - 5.0.0 - Admin+ Path Traversal

• JCH Optimize
• Path traversal

PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• Path traversal
• Information disclosure

PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• Path traversal
• Memory corruption

Path traversal in SonicWall Network Security Manager (NSM)

• SonicWall Network Security Manager (NSM)
• Path traversal

CodeWhale: Argument Injection in `git_show` Tool Allows Arbitrary File Write Without Approval

• Path traversal
• Command injection

>=0.8.41, <0.8.64 · fixed in 0.8.64

CodeWhale: Project config `instructions` override enables arbitrary file read into AI system prompt via cloned repository

• Path traversal
• Information disclosure

>=0.8.41, <0.8.64 · fixed in 0.8.64

Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE

• emlog
• Path traversal

CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

• Path traversal

>=0.8.41, <0.8.64 · fixed in 0.8.64

Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components

• IBM Langflow OSS
• Path traversal