CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- openclawOpenClaw < 2026.2.19 - Sensitive File Disclosure via stageSandboxMedia Path Traversal8.2 High
- openclawOpenClaw < 2026.2.17 - Arbitrary File Read via $include Directive Path Traversal6.7 Medium
- ibm webmethods api gateway (on-prem), webmethods api gateway +1 moreIBM webMethods API Management fails to validate user input and enables unauthorized arbitrary file read6.5 Medium
- openclawOpenClaw < 2026.2.26 - Improper Authorization via DM Pairing Store Identity Inheritance in Group Allowlist7.1 High
- openclawOpenClaw < 2026.2.26- Authentication Bypass via Encoded Dot-Segment Traversal in /api/channels8.3 High
- openclawOpenClaw < 2026.2.19 - Path Traversal in Feishu Media Temporary File Naming8.8 High
- openclawOpenClaw < 2026.2.24 - Arbitrary File Read via Improper Temporary Path Validation in Sandbox7.1 High
- openclawOpenClaw 2.0.0-beta3 < 2026.2.14 - Arbitrary JavaScript Module Loading via Hook Transform Path Traversal8.3 High
- bentomlBentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction8.6 High
- volcengine openvikingOpenViking .ovpack Import ZIP Slip Path Traversal8.4 High
- gpriday page builder by siteoriginPage Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion8.8 High
- openclawOpenClaw < 2026.2.22 - Symlink Traversal in Avatar Handling6.8 Medium
- openclawOpenClaw < 2026.2.24 - Arbitrary File Read via sendAttachment and setGroupIcon Message Actions7.1 High
- openclawOpenClaw 2026.1.16-2 < 2026.2.14 - Path Traversal (Zip Slip) in Archive Extraction via Installation Commands6.8 Medium
- openclawOpenClaw < 2026.2.14 - Path Traversal in Sandbox Skill Mirroring via Name Parameter5.6 Medium
- openclawOpenClaw < 2026.2.14 - Zip Slip Path Traversal in TAR Archive Extraction8.3 High
- openclawOpenClaw < 2026.2.25 - Symlink Traversal in agents.files Methods8.7 High
- openclawOpenClaw Canvas Path Traversal Information Disclosure Vulnerability6.5 Medium
- openclawOpenClaw < 2026.2.22 - Arbitrary File Read via Symlink Following in Static File Handler4.8 Medium
- openclawOpenClaw < 2026.2.25 - Symlink Traversal in Browser Trace/Download Path Handling5.9 Medium
- zhongyu09 openchatbiOpenChatBI: Critical Path Traversal Vulnerability in save_report Tool of OpenChatBI8.7 High
- google androidIn openFile of BugreportContentProvider.java, there is a possible way to read and write...8.4 High
- tp-link systems inc. deco be25 v1.0, tp-link deco be25 firmware +1 morePath Traversal on TP-Link Deco BE256.9 Medium
- jeesitethinkgem JeeSite Connection path traversal2.3 Low
- google androidIn multiple locations, there is a possible bypass of a file path filter designed to prevent...7.8 High
- gradio-app gradioGradio has Absolute Path Traversal on Windows with Python 3.13+7.5 High
- chainguard kaniko, red hat openshift serverless +1 morekaniko has tar archive path traversal in build context extraction allows writing files outside destination directory8.2 High
- beszelBeszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID6.5 Medium
- open-emr openemrOpenEMR Vulnerable to Arbitrary File Exfiltration via Fax Endpoint6.5 Medium
- centreon open ticketsPath traversal in Centreon Open Tickets9.9 Critical
- google web designerZip Slip leading to Arbitrary File Write and Privilege Escalation in Google Web Designer8.4 High
- johnson controls frick controls quantum hd, johnsoncontrols frick controls quantum hd firmware +1 moreJohnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion8.7 High
- xerox freeflow corePath Traversal leading to Remote Code Execution (RCE)9.8 Critical
- publiccmsSanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal5.3 Medium
- copeland xweb 300d pro, xweb 500b pro, xweb 500d pro +3 more +5 moreCopeland XWEB and XWEB Pro Path Traversal3.7 Low
- junrarJunrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix5.9 Medium
- hex hexpmPath Traversal in Local File Store Backend6.9 Medium
- videolan vlc for androidVLC for Android < 3.7.0 Remote Access Path Traversal2.3 Low
- bearsthemes worry proof backupWorry Proof Backup <= 0.2.4 - Authenticated (Subscriber+) Path Traversal via Backup Upload8.8 High
- linuxfoundation vitessVitess users with backup storage access can write to arbitrary file paths on restore9.3 Critical
- stuartbates wp responsive imagesWP Responsive Images <= 1.0 - Unauthenticated Path Traversal to Arbitrary File Read via src7.5 High
- pennyw0rth netexecNetExec vulnerable to arbitrary file write via path traversal in spider_plus module5.3 Medium
- No product listedZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control...9.8 Critical
- lfprojects model context protocol servers, modelcontextprotocol servers +1 moremcp-server-git : Path traversal in git_add allows staging files outside repository boundaries6.4 Medium
- zedZed has Zip Slip Path Traversal in Extension Archive Extraction7.4 High
- go-vikunja vikunjaVikunja has Path Traversal in CLI Restore7.2 High
- aces lorisLORIS vulnerable to path traversal in electrophysiology_browser8.1 High
- aces lorisLORIS media module vulnerable to remote code execution8.7 High
- feiyuchuixue sz-boot-parentfeiyuchuixue sz-boot-parent API templates path traversal5.3 Medium
- dart software development kit, dart-lang flutter, sdk +2 moreDart SDK and Flutter SDK have Zip slip in Dart Pub package extraction6.6 Medium
- Show moreLoading…