Path traversal.

WordPress WP User Frontend plugin <= 4.3.11 - Arbitrary File Deletion vulnerability

• weDevs WP User Frontend
• Path traversal

Plex Media Server arbitrary file write

• Plex Media Server
• Path traversal

Plex Media Server path traversal

• Plex Media Server
• Path traversal

Flatpak: flatpak: arbitrary write in host context via flatpak build-init

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Path traversal

Flatpak: flatpak: arbitrary write access as root via extra-data extraction

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Path traversal

Foxit PDF Editor/Reader Portfolio Directory Traversal Remote Code Execution Vulnerability

• Foxit Software Inc. Foxit PDF Editor
• Foxit Software Inc. Foxit PDF Reader
• Path traversal

Foxit PDF Editor/Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability

• Foxit Software Inc. Foxit PDF Editor
• Foxit Software Inc. Foxit PDF Reader
• Path traversal

Apache BuildStream: tar source extraction escape

• Apache Software Foundation Apache BuildStream
• Path traversal

Mint Workbench I Path traversal Vulnerability

• ABB Mint Workbench I
• Path traversal

CyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint.

• Path traversal

CyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents method of the /filemanager/controller endpoint.

• Path traversal

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Path traversal

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Path traversal

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

• IBM Financial Transaction Manager (FTM) for RedHat OpenShift
• Path traversal

KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

• Path traversal

>=1.16.0, <1.21.2 || >=1.22.0, <1.22.2 || >=1.23.0, <1.23.1 · fixed in 1.21.2, 1.22.2, 1.23.1

MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Arbitrary server-local file upload to Jira/Confluence attachments via unrestricted file_path parameters

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Incomplete path traversal fix allows intra-CWD module overwrite and RCE (bypass of GHSA-xjgw-4wvw-rgm4)

• Path traversal
• Code injection

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Path Traversal / Arbitrary File Read in confluence_upload_attachment MCP tool (incomplete fix of GHSA-xjgw-4wvw-rgm4)

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

• Path traversal
• Information disclosure

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Arbitrary File Read via Upload Attachment Tools

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read and exfiltration via MCP tool call

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

• Path traversal
• CWE-441

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Jira and Confluence attachment upload tools can read arbitrary server-local files

• Path traversal

<0.22.0 · fixed in 0.22.0

MCP Atlassian: MCP HTTP Client Server-Local File Exfiltration via Unvalidated Attachment Upload Path

• Path traversal
• Information disclosure

<0.22.0 · fixed in 0.22.0

MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment file_path, chained with missing auth on streamable-http transport

• Path traversal
• Authentication bypass

<0.22.0 · fixed in 0.22.0

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

• Path traversal

>=7.3.0, <16.5.0 · fixed in 16.5.0

Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

• Adobe Connect
• Adobe Connect Android Mobile App
• Path traversal

Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE

• netdata
• Path traversal
• Insecure deserialization

Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Path traversal

Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation

• LANTRONIX SLC8000
• LANTRONIX EMG8500
• Path traversal

Vector: Arbitrary file write in the file sink via templated path (path traversal).

• vector
• Path traversal

MISP Path Traversal via Organization Name in Org-Statistics Logo Check

• MISP
• Path traversal

@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory

• Path traversal

>=1.6.0, <2.0.3 · fixed in 2.0.3

MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name

• MISP
• Path traversal

MISP Information Disclosure via Forged Upload Path

• MISP
• Path traversal
• Information disclosure

External control of a file path in NVIDIA Infrastructure Controller

• NVIDIA Infrastructure Controller
• Path traversal

MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials

• MISP
• Path traversal
• Broken access control

Directory Traversal and File upload allows execution of arbitrary script on the Management Server

• checkpoint Quantum Security Management
• Path traversal

dgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal

• dgtlmoon changedetection.io
• Path traversal

dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal

• dgtlmoon changedetection.io
• Path traversal

Product Feed Manager for WooCommerce <= 6.6.43 - Authenticated (Shop Manager+) Path Traversal to File Deletion via 'provider' Parameter

• wahid0003 Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels
• Path traversal

BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Read

• SeaTheme BM Content Builder
• Path traversal

BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletion

• SeaTheme BM Content Builder
• Path traversal

Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler

• Path traversal

Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory deletion via a crafted payload.

• Path traversal

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e.

• Path traversal

Joplin: Path traversal in transcribe proxy endpoint via URL-encoded slash

• laurent22 joplin
• Path traversal

Joplin: Path traversal in resource sync — silent arbitrary file write outside the resource directory

• laurent22 joplin
• Path traversal
• CWE-20

Tautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_database

• Tautulli
• Path traversal
• Unrestricted file upload

draw.io: Path traversal in ExportProxyServlet allows access to arbitrary backend endpoints

• jgraph drawio
• Path traversal

Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation

• conda
• Path traversal

mport trusts environment-controlled temporary directories in privileged metadata extraction

• MidnightBSD mport
• Path traversal
• CWE-377

MISP Arbitrary Local File Read and SSRF via MISP Export Upload

• MISP
• Path traversal
• Server-side request forgery (SSRF)

Cri-o: cri-o: insufficient validation during container checkpoint restore

• Red Hat OpenShift Container Platform 4
• Red Hat OpenShift Container Platform 5
• Path traversal

nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias

• nvm
• Path traversal
• Information disclosure

web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file()/write_file() (applications/admin/controllers/webservices.py).

• Path traversal