Path traversal.

06ketan slideshot renderer.ts render_slides path traversal

• 06ketan slideshot
• Path traversal

0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal

• 0215AndrewFeng ACE-MCP
• Path traversal

03-lovepreetSingh MCP route.ts create_file path traversal

• 03-lovepreetSingh MCP
• Path traversal

00Kisumi00 mcp-file-analyzer analyze_csv_data MCP tool main.py ControlFlowNode path traversal

• 00Kisumi00 mcp-file-analyzer
• Path traversal

Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration

• WatchDog Anti-Virus
• Path traversal

Code injection in Vanderbilt University REDCap

• Vanderbilt University REDCap
• Path traversal
• Code injection

Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

• gopeed
• Path traversal

QloApps through 1.7.0 Arbitrary File Read via getEmailHTML

• webkul qloapps
• Path traversal

rclone serve docker Path Traversal via Volume Name

• rclone
• Path traversal

rclone before 1.75.1 Path Traversal via Directory Listing Names

• rclone
• Path traversal

JetFormBuilder 3.5.6.2 - 3.6.5.2 - Admin+ Arbitrary File Deletion via Server-Side Validation Callback

• JetFormBuilder — Dynamic Blocks Form Builder
• Path traversal

Open edX Platform: Path traversal via prefix-bypass in safe_extractall Path Validation

• openedx-platform
• Path traversal

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• Path traversal

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• Path traversal

Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet

• Caucho Technology, Inc. Resin
• Path traversal

Perses's unvalidated project parameter enables filesystem path traversal

• Path traversal

<0.54.0-rc.0 · fixed in 0.54.0-rc.0

LubeLogger: Path Traversal in HandleTranslationFileUpload Allows Authenticated Users to Write Files Outside Data Directory

• hargata lubelog
• Path traversal

IBM Cloud Pak for Data is vulnerable to path traversal

• IBM Cloud Pak for Data
• Path traversal

A path traversal vulnerability has been identified in HCL AppScan 360° (CVE-2026-21822).

• HCL Software HCL AppScan 360°
• Path traversal

Path traversal in Synology DiskStation Manager (DSM)

• Synology DiskStation Manager (DSM)
• Path traversal

Path traversal in Synology DiskStation Manager (DSM)

• Synology DiskStation Manager (DSM)
• Path traversal

External control of a file path in Synology DiskStation Manager (DSM)

• Synology DiskStation Manager (DSM)
• Path traversal

Store Exporter <= 2.8.0 - Authenticated (Shop Manager+) Path Traversal to Arbitrary File Read and Arbitrary File Deletion via 'filename' Parameter

• jkohlbach Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers
• Path traversal

Printcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parameters

• Printcart Store – Web to Print Product Designer for WooCommerce
• Path traversal

HGiga｜OAKlouds - Arbitrary File Read

• HGiga OAKlouds-bulletin_v3-2.0
• HGiga OAKlouds-bulletin_v3-3.0
• Path traversal

Azure Logic Apps Elevation of Privilege Vulnerability

• Microsoft Azure Logic Apps
• Path traversal
• Broken access control

Azure Arc Elevation of Privilege Vulnerability

• Microsoft Azure ARC
• Path traversal

AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory

• vmDeshpande ai-agent-automation
• Path traversal

WeGIA: Unauthenticated Auth Bypass + Local File Inclusion

• LabRedesCefetRJ WeGIA
• Path traversal
• Authentication bypass

Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global

• givanz Vvveb
• Path traversal
• Code injection

Vvveb: Path Traversal in Revision Backup Reader/Deleter via Unsanitized theme Parameter

• givanz Vvveb
• Path traversal

SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing

• dataease SQLBot
• Path traversal

Frappe LMS: Path Traversal in SCORM File Serving

• frappe lms
• Path traversal

CVE-2026-15815 CVE Record

• Grafana OSS
• Grafana Enterprise
• Path traversal
• Code injection

Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)

• Path traversal

<2.0.15 · fixed in 2.0.15

Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion

• Path traversal

<2.0.16 · fixed in 2.0.16

Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content

• Path traversal

<2.0.16 · fixed in 2.0.16

Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

• Path traversal
• Code injection

<2.0.1 · fixed in 2.0.1

Verizon Cloud for Android < 26.7.10 Path Traversal via OneTouchUploadActivity

• Verizon Cloud for Android
• Path traversal

Grav: Path Traversal in ImageMedium::watermark() — arbitrary file disclosure via publicly-cached images

• Path traversal

>=2.0.10, <2.0.11 · fixed in 2.0.11

oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)

• Path traversal

<2.6.2 · fixed in 2.6.2

Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults

• brufdev many-notes
• Path traversal

mport package installation has symlink TOCTOU in chown and chmod handling

• MidnightBSD mport
• Path traversal
• Race condition

mport directory asset installation is vulnerable to symlink and path traversal races

• MidnightBSD mport
• Path traversal
• Race condition

mport sample file handling can write outside the configured root

• MidnightBSD mport
• Path traversal

mport package installation can overwrite existing unmanaged or differently owned files

• MidnightBSD mport
• Path traversal
• Information disclosure

mport package bundle downloads allow unsafe destination filenames

• MidnightBSD mport
• Path traversal

Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root

• Path traversal

<7.6.1 · fixed in 7.6.1

Duplicate Advisory: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted

• Path traversal

<=3.11.6 · no fixed version yet

pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool

• pgadmin.org pgAdmin 4
• Path traversal
• Command injection

pgAdmin 4: File Manager save_file writes through a symbolic link planted after the containment check

• pgadmin.org pgAdmin 4
• Path traversal
• Race condition

RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameter

• RosarioSIS
• Path traversal

RAGFlow through 0.27.2 Tenant Import Endpoints Path Traversal

• infiniflow ragflow
• Path traversal

Redocly CLI: Path traversal when using `split` command

• Path traversal

<1.34.17 || >=2.0.0, <2.33.2 · fixed in 1.34.17, 2.33.2

Path traversal in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others

• Dell OpenManage Server Administrator Managed Node (Patch) for Windows
• Dell OpenManage Server Administrator Managed Node for RHEL 8.10
• Path traversal

Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver

• Red Hat build of Quarkus 3.27.5.SP2
• Red Hat build of Quarkus 3.33.3.SP2
• Path traversal

HUBzero CMS through 2.2.32 Path Traversal via File Upload

• hubzero-cms
• Path traversal

admin3 through 3.0.0 Arbitrary File Write via Path Traversal in Storage Upload Filename

• cjbi admin3
• Path traversal

Path traversal in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others

• Dell OpenManage Server Administrator Managed Node (Patch) for Windows
• Dell OpenManage Server Administrator Managed Node for RHEL 8.10
• Path traversal

ComfyUI before 0.30.0 Path Traversal via dataset save nodes

• Comfy-Org ComfyUI
• Path traversal