CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- lms community lyrion music serverLyrion Music Server 9.2.0 Path Traversal File Read8.7 High
- imagemagickImageMagick: Policy Bypass can read disallowed files5.5 Medium
- red hat advanced cluster management for kubernetes 2, build of keycloak, enterprise linux 8 +1 more +3 moredecompress: Arbitrary File Write via Archive Extraction (Zip Slip)6.1 Medium
- No product listedAn issue in the cluster-admin:backup-datastore component of Controller v12.0.5 allows attackers...9.1 Critical
- sylabs singularity, singularitypro +1 moreSingularity: Incorrect path matching for 'limit container paths' directive4.8 Medium
- python software foundation cpythontarfile.data_filter path traversal bypass allows writing outside the extraction directory6.9 Medium
- joomsky js jobsJoomla com_jsjobs 1.2.6 Arbitrary File Deletion7.1 High
- web-dorado contact form makerContact Form by WD 1.13.1 CSRF to Local File Inclusion5.1 Medium
- ad-manager-wd ad manager wdWordPress Plugin ad manager wd 1.0.11 Arbitrary File Download9.3 Critical
- tautulliTautulli Vulnerable to Authenticated Path Traversal in Cache Deletion API5.7 Medium
- acer connect m6e 5g portable wifi router, connect m6e 5g firmware +1 moreLocal Modem Manipulation via Binder Interfaces8.5 High
- docling docling-coreDocling Core has unsafe remote filename resolution8.6 High
- doclingDocling: Potential Path Traversal via LaTeX \includegraphics and \input Commands5.5 Medium
- docling, red hat openshift ai 3.4 +1 moreDocling: Unsafe Zip Extraction in EasyOCR Model Download7.5 High
- synology hyper backupAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability...4.1 Medium
- synology hyper backupAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability...4.3 Medium
- mbs double-a profibus, double-a x-link, double-x can +16 more +18 moreLocal file inclusion vulnerability and deletion in ugw-logread method8.7 High
- alfio-event alf.ioalf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Script4.9 Medium
- browserstack browserstack-runnerBrowserStack Runner 0.9.5 Path Traversal via _default HTTP Handler7.1 High
- gleamPath Traversal in build/packages/packages.toml Allows Arbitrary Directory Deletion5.6 Medium
- gleamPath Traversal in gleam docs build via documentation.pages Allows Arbitrary File Read and Write4.6 Medium
- vivotek fd8136 firmwareA path traversal vulnerability in the /admin/downloadMedias.cgi endpoint of VIVOTEK INC FD8136...6.5 Medium
- anionex banana-slidesBanana Slides 0.4.0 Path Traversal via generate_image() in ai_service.py8.7 High
- swivid f5-ttsF5-TTS 1.1.20 Path Traversal via finetune_gradio.py create_data_project()8.8 High
- ishayoyo excel-mcpishayoyo excel-mcp read_file/write_file index.ts path traversal5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud: Limited path traversal via template API if using `{lang}` in config4.4 Medium
- mamunur rashid classified listingWordPress Classified Listing plugin <= 5.3.8 - Arbitrary File Download vulnerability6.5 Medium
- gravity forms forms, rocketgenius inc. gravity forms +1 moreWordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability9.6 Critical
- conda py-rattler, rattler, rattler-build +1 more +3 moreRattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)6.9 Medium
- lharries whatsapp-mcplharries whatsapp-mcp Send API Endpoint main.go SendMessageRequest path traversal5.1 Medium
- vitest-dev vitestVitest: Arbitrary file can be read and executed when Vitest UI server is listening9.8 Critical
- vertex-app vertexVertex Vulnerable to Path Traversal8.6 High
- soplanningPath Traversal in SOPlanning6.4 Medium
- astrbotdevs astrbotAstrBotDevs AstrBot API Endpoint delete path traversal5.3 Medium
- apache mina sshdApache MINA SSHD: Path traversal in org.apache.sshd:sshd-git7.1 High
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible to update a Device...6.2 Medium
- openstamanager open sta managerOpen STA Manager 2.3 Arbitrary File Download via Path Traversal7.1 High
- open ises project, openises open ises project +1 moreThe Open ISES Project 3.30A Path Traversal Arbitrary File Download8.7 High
- mervinpraison praisonaiPraisonAI has an Arbitrary File Write in Python API7.1 High
- mervinpraison praisonaiPraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate8.7 High
- home-assistant home assistant coreHome Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore9.3 Critical
- mervinpraison praisonaiPraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-443348.1 High
- sparkle project sparkleSparkle: Binary delta apply intermediate-symlink traversal in malicious .delta6.1 Medium
- astral-sh uvuv before 0.11.15 Arbitrary File Write via Entry Point Names8.7 High
- triliumnext triliumTrilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)9.3 Critical
- hanxi xiaomusicxiaomusic 0.5.7 Path Traversal via GET /music endpoint8.7 High
- gotenbergGotenberg: Path traversal in zip entry name via Windows-style separators in upload filename8.8 High
- dokployDokploy: Remote Code Execution through Path Traversal9.9 Critical
- navigate cms, navigatecms navigate cms +1 moreNavigate CMS 2.8.5 Path Traversal via navigate_download.php7.1 High
mautic/corePackagistMautic vulnerable to Path Traversal via Campaign Import9.9 Critical- Show moreLoading…