CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- gitoxidelabs gitoxidegitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules8.7 High
- gitoxidelabs gitoxidegitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass8.7 High
- oxyno-zeta s3-proxyoxyno-zeta/s3-proxy: Security Issues in Resource Path Matching9.4 Critical
- langflowLangflow: Path Traversal in Langflow Knowledge Bases API9.6 Critical
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 morejupyter-server path traversal allows access to sibling directories sharing root_dir name prefix7.6 High
- eclipse foundation basyxEclipse BaSyx Java Server SDK vulnerable to Path Traversal10.0 Critical
- muffingroup bethemeBetheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload'6.5 Medium
- apache thriftApache Thrift: Node.js web_server.js multi-vulnerability7.3 High
- wpmudev forminator forms – contact form, payment form & custom form builderForminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.52.1 - Unauthenticated Arbitrary File Read via 'upload-1[file][file_path]'7.5 High
- 54yyyu code-mcp54yyyu code-mcp MCP File server.py is_safe_path path traversal6.9 Medium
- usamak98 python-notebook-mcpUsamaK98 python-notebook-mcp server.py add_cell path traversal6.9 Medium
- roxnor emailkit – email customizer for woocommerce & wpEmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter6.5 Medium
- timwhitlock loco translateLoco Translate <= 2.8.2 - Authenticated (Translator+) Path Traversal to Limited File Read via 'ref' Parameter4.9 Medium
- axle-bucamp mcp-docusaurusAxle-Bucamp MCP-Docusaurus document.py get_content path traversal6.9 Medium
- rtgs2017 nagaagentRTGS2017 NagaAgent Skills Endpoint extensions.py path traversal6.9 Medium
- chainguard-dev apkoapko dirFS has a symlink-following path traversal that allows multiple entry points to escape the build root7.5 High
- azuracastAzuraCast: Path Traversal in `currentDirectory` Parameter Enables Remote Code Execution via Media Upload8.8 High
- openmrs, openmrs openmrs-core +1 moreOpenMRS Core arbitrary file write and code execution via Zip Slip in module upload9.4 Critical
- openmrs, openmrs openmrs-core +1 moreOpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet8.2 High
- icip-cas pptagentPPTAgent: Arbitrary File Write via `save_generated_slides`4.6 Medium
- icip-cas pptagentPPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image4.6 Medium
- puchunjie doc-tools-mcppuchunjie doc-tools-mcp MCP mcp-server.ts open_document path traversal5.3 Medium
- ryanjoachim mcp-rtfmryanjoachim mcp-rtfm MCP update_doc path traversal5.3 Medium
- ravenwits mcp-server-arangodbravenwits mcp-server-arangodb MCP tools.ts arango_backup path traversal5.3 Medium
- av stumpfl pixera two media serverAV Stumpfl Pixera Two Media Server Service Port 1338 path traversal5.3 Medium
- jsbroks coco annotatorjsbroks COCO Annotator Data Endpoint datasets.py path traversal5.3 Medium
- kerwincui fastbeekerwincui FastBee Tool Download Endpoint ToolController.java ToolController.download path traversal5.3 Medium
- ruvnet sublinear-time-solverruvnet sublinear-time-solver MCP server.js export_state path traversal6.9 Medium
- wordpresschef salon booking system – free versionSalon Booking System – Free Version <= 10.30.25 - Unauthenticated Arbitrary File Read via Booking File Field Path Traversal7.5 High
- 8nite metatrader-4-mcp8nite metatrader-4-mcp sync_ea_from_file index.ts CallToolRequestSchema path traversal5.3 Medium
- dayoooun hwpx-mcpDayoooun hwpx-mcp MCP index.ts export_to_html path traversal5.3 Medium
- flux159 mcp-game-asset-genFlux159 mcp-game-asset-gen MCP index.ts image_to_3d_async path traversal6.9 Medium
- ghantakiran splunk-mcp-integrationghantakiran splunk-mcp-integration CSV Export csv_export.py create_csv_export path traversal6.9 Medium
- ggerve coding-standards-mcpggerve coding-standards-mcp server.py get_best_practices path traversal6.9 Medium
- fujian apex livebosFujian Apex LiveBOS Endpoint UploadImage.do path traversal6.9 Medium
- linuxfoundation automotive grade linuxAGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22)...9.8 Critical
- wireshark, red hat enterprise linux 10, enterprise linux 10.0 extended update support +4 more +6 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark7.0 High
- ibm langflow desktop, langflow desktop +1 morePath Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload Endpoint6.5 Medium
- ibm langflow desktop, langflow desktop +1 moreArbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 API6.5 Medium
- weaver network co., ltd. e-cologyWeaver E-cology 9.5 Unauthenticated Arbitrary File Read via XmlRpcServlet8.7 High
- oppo coloros assistantColorOS Assistant Path Traversal Vulnerability7.1 High
com.shopizer:shopizerMavenShopizer has a path traversal issue10.0 Critical- No product listedAn issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows...8.8 High
- No product listedAn issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows...9.6 Critical
- zachhandley zmcptoolsZachHandley ZMCPTools MCP Log Resource ResourceManager.ts path traversal5.3 Medium
- i18next i18next-http-middlewarePath traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parameters8.2 High
- geopython pygeoapipygeoapi: Path Traversal in STAC FileSystemProvider7.5 High
- admidioAdmidio: Path Traversal via Unvalidated `name` Parameter in Document Add Mode Enables Arbitrary Server File Read4.5 Medium
- admidioAdmidio: Path Traversal in ECard Preview Allows Reading Arbitrary Server Files Including Database Credentials6.5 Medium
- openclawOpenClaw < 2026.4.15 - Arbitrary Local File Read via Webchat Audio Embedding6.3 Medium
- Show moreLoading…