CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- webp-sh webp server goWebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows8.7 High
- motioneye-project motioneyemotionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint6.5 Medium
- keras-team keras-team/kerasPath Traversal in keras-team/keras6.1 Medium
- grafana, grafana oss +1 morePath traversal in the Tempo and Loki data source plugins5.4 Medium
- grafana oss, loki datasource +1 morePath traversal in the Loki data source plugin7.7 High
- ail project frameworkAuthenticated Path Traversal in AIL Framework Investigation Downloads Allows Arbitrary File Read8.3 High
- flowiseai flowiseFlowiseAI Flowise S3 Document Loader S3.ts path traversal5.3 Medium
- craftcms cmsCraft CMS - Authenticated Path Traversal in assets/icon Extension Parameter7.1 High
- eemitch simple file listSimple File List <= 6.3.7 - Unauthenticated Arbitrary File Deletion via Path Traversal in 'eeSubFolder' Parameter7.5 High
- crmperks database for contact form 7, wpforms, elementor formsDatabase for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value8.1 High
- ankitects ankiAnki's local HTTP server does not sufficiently validate requests2.1 Low
- surrealdbSurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZER8.3 High
- pydantic pydantic-settingsNestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size5.3 Medium
- langchain-ai langsmith-sdkArbitrary server-side file read in LangSmith SDK TracingMiddleware5.0 Medium
- ankitects ankiAnki: User scripts in iframes have access to the internal Anki API6.5 Medium
- evermind-ai everosPath traversal in EverOS /api/v1/memory/add via unvalidated sender_id8.2 High
- jovancoding network-aiEnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data6.1 Medium
- jovancoding network-aiNetwork-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups5.5 Medium
- jovancoding network-aiNetwork-AI: AgentRuntime sandbox path-prefix checks allow file access outside the configured base directory6.5 Medium
- jovancoding network-aiNetwork-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning7.1 High
- bitbonsai mcpvaultMCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested6.9 Medium
- symfony uxSymfony: Path Traversal in symfony/ux-toolkit Allows Arbitrary File Write and Read via Crafted Recipe Manifest7.8 High
- allure-framework allure2Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read6.2 Medium
- qbee-io transportqbee transport: Symlink-chain path traversal in tar extraction (one level outside destination)6.0 Medium
- kestra-io kestraKestra task inputFiles accepts traversal filenames for worker file writes6.5 Medium
- lsegal yardYARD static cache reads raw traversal paths before router sanitization5.3 Medium
- sentriz gonicgonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host8.1 High
- sentriz gonicPath traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist7.1 High
- byrongamatos slopsmithSlopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCE7.6 High
- cliEntire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind6.2 Medium
- sonos tractTract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx6.1 Medium
- ail-project ail-frameworkAuthenticated Path Traversal in AIL framework /objects/item/diff Allows Reading Gzip-Compressed Files5.3 Medium
- error311 fileriseFileRise shared-folder upload path traversal allows arbitrary file write and admin takeover9.3 Critical
- themefusion avada (fusion) builderAvada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value9.1 Critical
- teamwsa woosa – marktplaats for woocommerceWoosa <= 2.0.5 - Authenticated (Administrator+) Arbitrary File Read via 'log_file' Parameter4.9 Medium
- hkuds nanobotnanobot: Path traversal via unsanitized WhatsApp document fileName enables arbitrary file write8.7 High
- kidocode crawl4aiCrawl4AI arbitrary file write via download filename path traversal9.6 Critical
- labs64 netlicensing-mcpNetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction9.6 Critical
- daytonaio daytonaDaytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape4.2 Medium
- open-telemetry github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter, opentelemetry-collector-contrib +1 moreOpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token5.3 Medium
- mervinpraison praisonaiPraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation9.1 Critical
- mervinpraison praisonaiPraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion8.1 High
- mervinpraison praisonaiPraisonAI Code agent tools fail open without a workspace boundary7.3 High
- mervinpraison praisonaiagentsPraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal7.5 High
- mervinpraison praisonaiPraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API7.5 High
- mervinpraison praisonaiPraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage7.5 High
- mervinpraison praisonaiPraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal7.5 High
- ubb systems ubb.threadsRemote Code Execution via arbitrary file read and write in UBB.threads8.6 High
- seppmail ag secure email gatewayPath traversal in PDF generation module7.1 High
- baptistearno typebot.ioTypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName9.3 Critical
- Show moreLoading…