agentprime: Path traversalEvery new Path traversal Advisory and CVE.https://agentprime.io/CVE-2026-102943: Dagu MCP DAG specification read bypasses path containment and workspace isolationhttps://agentprime.io/advisories/CVE-2026-102943/https://agentprime.io/advisories/CVE-2026-102943/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:48:45 GMTCVECVE-2026-68509: FairEmail: Path traversal in shared attachment handling can write files outside the intended shared directoryhttps://agentprime.io/advisories/CVE-2026-68509/https://agentprime.io/advisories/CVE-2026-68509/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 22:45:24 GMTCVECVE-2026-100395: LXC: lxc-copy host-context hostname update follows symlinkhttps://agentprime.io/advisories/CVE-2026-100395/https://agentprime.io/advisories/CVE-2026-100395/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 21:45:58 GMTCVECVE-2026-81190: KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRFhttps://agentprime.io/advisories/CVE-2026-81190/https://agentprime.io/advisories/CVE-2026-81190/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 20:52:19 GMTCVECVE-2026-87008: Code Graph RAG structural tools follow out-of-root symlinkshttps://agentprime.io/advisories/CVE-2026-87008/https://agentprime.io/advisories/CVE-2026-87008/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 20:13:23 GMTCVECVE-2026-77604: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readhttps://agentprime.io/advisories/CVE-2026-77604/https://agentprime.io/advisories/CVE-2026-77604/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 20:10:19 GMTCVECVE-2026-63213: SuiteCRM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in SuiteCRMhttps://agentprime.io/advisories/CVE-2026-63213/https://agentprime.io/advisories/CVE-2026-63213/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 18:17:00 GMTCVECVE-2026-107129: Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.0https://agentprime.io/advisories/CVE-2026-107129/https://agentprime.io/advisories/CVE-2026-107129/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:58:05 GMTCVECVE-2026-112110: Privileged file deletion in SafeNet Authentication Client SACSrvhttps://agentprime.io/advisories/CVE-2026-112110/https://agentprime.io/advisories/CVE-2026-112110/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:33:45 GMTCVECVE-2026-119083: GluonTS arbitrary file write during archive extractionhttps://agentprime.io/advisories/CVE-2026-119083/https://agentprime.io/advisories/CVE-2026-119083/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 16:34:57 GMTCVECVE-2026-102523: MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITIONhttps://agentprime.io/advisories/CVE-2026-102523/https://agentprime.io/advisories/CVE-2026-102523/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:31:27 GMTCVECVE-2026-66903: Apache OFBiz: Authenticated Path Traversal in Catalog Image Managementhttps://agentprime.io/advisories/CVE-2026-66903/https://agentprime.io/advisories/CVE-2026-66903/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:12:30 GMTCVECVE-2026-76150: Apache OFBiz: Authenticated path traversal and missing authorization check in replaceImageToExistImagehttps://agentprime.io/advisories/CVE-2026-76150/https://agentprime.io/advisories/CVE-2026-76150/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:09:10 GMTCVECVE-2026-76152: Apache OFBiz: Authenticated path traversal and missing authorization check in imageCrop and imageRotate serviceshttps://agentprime.io/advisories/CVE-2026-76152/https://agentprime.io/advisories/CVE-2026-76152/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:08:12 GMTCVECVE-2026-82916: Apache OFBiz: webtools xmldsdump exports any entity to any pathhttps://agentprime.io/advisories/CVE-2026-82916/https://agentprime.io/advisories/CVE-2026-82916/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 14:01:49 GMTCVECVE-2026-97356: Apache OFBiz: Insufficiently Protected Credentials in ViewFile Enable Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-97356/https://agentprime.io/advisories/CVE-2026-97356/Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 13:44:53 GMTCVECVE-2026-104720: Path Traversal in Kobikom Telecommunications' Kobikomhttps://agentprime.io/advisories/CVE-2026-104720/https://agentprime.io/advisories/CVE-2026-104720/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 13:08:22 GMTCVECVE-2026-121489: Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directoryhttps://agentprime.io/advisories/CVE-2026-121489/https://agentprime.io/advisories/CVE-2026-121489/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 11:55:23 GMTCVEcriticalCVE-2026-116617: Motors <= 1.4.128 - Authenticated (Subscriber+) File Deletion via 'stm_dealer_logo_path' Parameterhttps://agentprime.io/advisories/CVE-2026-116617/https://agentprime.io/advisories/CVE-2026-116617/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 04:48:06 GMTCVECVE-2026-122188: DeepGraphLearning KnowledgeGraphEmbedding Checkpoint Loading run.py override_config path traversalhttps://agentprime.io/advisories/CVE-2026-122188/https://agentprime.io/advisories/CVE-2026-122188/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:45:20 GMTCVECVE-2026-122311: Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argumenthttps://agentprime.io/advisories/CVE-2026-122311/https://agentprime.io/advisories/CVE-2026-122311/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:13 GMTCVEcriticalCVE-2026-122159: Edge0-AI Audio8_TTS Model Path Resolution runtime.py ArkTtsRuntime.__init__ path traversalhttps://agentprime.io/advisories/CVE-2026-122159/https://agentprime.io/advisories/CVE-2026-122159/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:15:21 GMTCVECVE-2026-57565: Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)https://agentprime.io/advisories/CVE-2026-57565/https://agentprime.io/advisories/CVE-2026-57565/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:45:21 GMTCVECVE-2026-57567: Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webviewhttps://agentprime.io/advisories/CVE-2026-57567/https://agentprime.io/advisories/CVE-2026-57567/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:43:03 GMTCVECVE-2026-121746: nvm use --save and nvm install --save write through a symlinked .nvmrc, overwriting any file the user can writehttps://agentprime.io/advisories/CVE-2026-121746/https://agentprime.io/advisories/CVE-2026-121746/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:31:57 GMTCVECVE-2026-58128: Alan: Health Insurance for Android 1.450.0 Path Traversal via ShareReceiverActivityhttps://agentprime.io/advisories/CVE-2026-58128/https://agentprime.io/advisories/CVE-2026-58128/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:31:48 GMTCVECVE-2026-121747: nvm prints the contents of any readable file through a symlinked .nvmrchttps://agentprime.io/advisories/CVE-2026-121747/https://agentprime.io/advisories/CVE-2026-121747/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:30:32 GMTCVECVE-2026-121748: nvm use --delete-prefix lets a project .npmrc choose which file npm rewrites or makes world-writablehttps://agentprime.io/advisories/CVE-2026-121748/https://agentprime.io/advisories/CVE-2026-121748/CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:29:25 GMTCVECVE-2026-122235: Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlinkhttps://agentprime.io/advisories/CVE-2026-122235/https://agentprime.io/advisories/CVE-2026-122235/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:06:42 GMTCVECVE-2026-16725: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmithhttps://agentprime.io/advisories/CVE-2026-16725/https://agentprime.io/advisories/CVE-2026-16725/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:04:13 GMTCVECVE-2026-122013: Comfast CF-WR632AX Multipart webmgnt path traversalhttps://agentprime.io/advisories/CVE-2026-122013/https://agentprime.io/advisories/CVE-2026-122013/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:45:20 GMTCVEcriticalCVE-2026-122136: Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary Filehttps://agentprime.io/advisories/CVE-2026-122136/https://agentprime.io/advisories/CVE-2026-122136/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:36:54 GMTCVECVE-2026-76806: Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oraclehttps://agentprime.io/advisories/CVE-2026-76806/https://agentprime.io/advisories/CVE-2026-76806/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 19:31:54 GMTCVECVE-2026-76506: Cisco Unified Computing System Central Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-76506/https://agentprime.io/advisories/CVE-2026-76506/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 16:27:03 GMTCVECVE-2026-121967: Coder before 2.29.22, 2.34.13, 2.35.10, 2.36.8, 2.37.5, and 2.38.1 AI Gateway Path Traversalhttps://agentprime.io/advisories/CVE-2026-121967/https://agentprime.io/advisories/CVE-2026-121967/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 15:33:28 GMTCVECVE-2026-110935: Path traversal in plug-in deploymenthttps://agentprime.io/advisories/CVE-2026-110935/https://agentprime.io/advisories/CVE-2026-110935/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 09:20:06 GMTCVECVE-2026-114425: Forged LFT metadata permits arbitrary file read and deletionhttps://agentprime.io/advisories/CVE-2026-114425/https://agentprime.io/advisories/CVE-2026-114425/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 08:29:55 GMTCVEcriticalCVE-2026-19731: Path Traversal in TÜBİTAK BİLGEM's İmzagerhttps://agentprime.io/advisories/CVE-2026-19731/https://agentprime.io/advisories/CVE-2026-19731/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 08:15:49 GMTCVECVE-2026-115426: WPvivid Backup & Migration < 0.9.138 - Admin+ Path Traversal via Local Backup Directory Settinghttps://agentprime.io/advisories/CVE-2026-115426/https://agentprime.io/advisories/CVE-2026-115426/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:00:27 GMTCVECVE-2026-115242: WPvivid Backup & Migration < 0.9.137 - Admin+ Path Traversal via Staging Site Pathhttps://agentprime.io/advisories/CVE-2026-115242/https://agentprime.io/advisories/CVE-2026-115242/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 06:00:26 GMTCVECVE-2026-92189: Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92189/https://agentprime.io/advisories/CVE-2026-92189/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:27 GMTCVEcriticalCVE-2026-92197: Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92197/https://agentprime.io/advisories/CVE-2026-92197/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:23 GMTCVECVE-2026-92186: Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92186/https://agentprime.io/advisories/CVE-2026-92186/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:15 GMTCVECVE-2026-92194: Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92194/https://agentprime.io/advisories/CVE-2026-92194/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:11 GMTCVECVE-2026-92195: Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92195/https://agentprime.io/advisories/CVE-2026-92195/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:05 GMTCVECVE-2026-92192: Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92192/https://agentprime.io/advisories/CVE-2026-92192/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:51:01 GMTCVECVE-2026-92193: Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92193/https://agentprime.io/advisories/CVE-2026-92193/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:50:55 GMTCVECVE-2026-92187: Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2026-92187/https://agentprime.io/advisories/CVE-2026-92187/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:50:52 GMTCVECVE-2026-120641: CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows pathshttps://agentprime.io/advisories/CVE-2026-120641/https://agentprime.io/advisories/CVE-2026-120641/Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 23:40:36 GMTCVECVE-2026-108327: Tanium addressed a path traversal vulnerability in Tanium Data Service.https://agentprime.io/advisories/CVE-2026-108327/https://agentprime.io/advisories/CVE-2026-108327/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 22:17:23 GMTCVE