CWE-22: Path traversal
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Also known as Improper Limitation of a Pathname to a Restricted Directory, Directory traversal, Path transversal.
A kind of CWE-706 Use of Incorrectly-Resolved Name or Reference.
From the CWE List. © The MITRE Corporation.
Newest
- adobe c2pa, c2pa-web, c2patool +3 more +5 moreCAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)5.5 Medium
- intel gaudi container runtimePath traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User...5.4 Medium
- wei-shaw sub2apiSub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentials8.5 High
- rapid7 velociraptorVelociraptor directory traversal via the NewNotebook API7.1 High
- intelliants subrion cmsIntelliants Subrion CMS - Path Traversal6.5 Medium
- asyncfuncai deepwiki-openAsyncFuncAI deepwiki-open - Path Traversal7.5 High
- nozomi networks arcPath traversal in the Offline archives functionality of the local web interface in Arc before v2.7.06.8 Medium
- sap approuter, sap se business ai platform (approuter) +1 moreMultiple vulnerabilities in SAP Business AI Platform (Approuter)5.9 Medium
- sap se manufacturing integration and intelligenceDirectory Traversal vulnerability in SAP Manufacturing Integration and Intelligence7.6 High
- eugeny tabbyTabby: Windows SFTP path traversal allows a malicious server to write files outside the selected download directory8.1 High
- sucuri sucuri-wordpress-pluginSucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.php7.0 High
- frostming unearthunearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape7.2 High
- hugging face accelerateHugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map6.9 Medium
- tp-link systems inc. archer mr200 v7, archer mr600 v2, tl-mr100 v3.20 +3 more +5 moreAuthenticated Arbitrary File Write Vulnerability in multiple devices6.9 Medium
- nceas metacatunauthenticated path traversal in Metacat 2.x9.3 Critical
- o1lab xmysqlo1lab xmysql - Unauthenticated Path Traversal via name Query Parameter7.5 High
- mustafaakin cast-localvideomustafaakin cast-localvideo - Unauthenticated Path Traversal via dir Parameter7.5 High
- cube-root directory-servecube-root directory-serve - Unauthenticated Path Traversal Arbitrary File Deletion9.1 Critical
- asyncfuncai deepwiki-opendeepwiki-open - Unauthenticated Path Traversal Leading to Arbitrary File Write and Delete9.8 Critical
- gnu cpioPath Traversal in GNU cpio4.6 Medium
- arraytics eventinEventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting7.2 High
- systemd systemd-oomdsystemd-oomd: unprivileged users can terminate arbitrary processes5.5 Medium
- handwriting-ocr handwriting-ocr-mcp-serverHandwriting-OCR handwriting-ocr-mcp-server upload_document index.ts fs.readFileSync path traversal4.8 Medium
- nikolaibibo claude-comfyui-mcpNikolaibibo claude-comfyui-mcp comfy_upload_image utils.ts copyFileSync path traversal4.8 Medium
- bartekke8it56w2 new-mcpbartekke8it56w2 new-mcp geminithinking index.ts fs.readFileSync path traversal4.8 Medium
- pv-bhat gemsuite-mcpPV-Bhat gemsuite-mcp gemini_search unified-gemini.ts path traversal4.8 Medium
- noctedefensor ludusmcpNocteDefensor LudusMCP insert_creds_range_config insertCredsRangeConfig.ts path traversal4.8 Medium
- ichigo3766 image-gen-mcpIchigo3766 image-gen-mcp upscale_images index.ts path traversal4.8 Medium
- automateyournetwork mcpyatsautomateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal4.8 Medium
- flippercode wp maps proWP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion6.5 Medium
- pimzino spec-workflow-mcpPimzino spec-workflow-mcp approvals.ts ApprovalStorage.createApproval path traversal4.8 Medium
- jane-xiaoer skill-vision-controlJane-xiaoer skill-vision-control config.ts getSkillVersionsDir path traversal4.8 Medium
- bazylhorsey obsidian-mcp-serverbazylhorsey obsidian-mcp-server CanvasService.ts writeCanvas path traversal4.8 Medium
- angrysky56 advanced-reasoning-mcpangrysky56 advanced-reasoning-mcp index.ts switch_memory_library path traversal4.8 Medium
- aktsmm skill-ninja-mcp-serveraktsmm skill-ninja-mcp-server installer.ts uninstallSkill path traversal4.8 Medium
- abracadabra50 claude-seshabracadabra50 claude-sesh enricher.ts enrichSession path traversal4.8 Medium
- jevon-zhong ai-doctorJevon-Zhong Ai-doctor filemanagement.service.ts deleteImage path traversal4.8 Medium
- incomestreamsurfer roo-code-memory-bank-mcp-serverIncomeStreamSurfer roo-code-memory-bank-mcp-server read_memory_bank_file/append_memory_bank_entry index.ts appendMemoryBankEntry path traversal4.8 Medium
- helloggx shadcn-vue-mcpHelloGGX shadcn-vue-mcp callback-server.ts fs.promises.readFile path traversal4.8 Medium
- azer react-analyzer-mcpazer react-analyzer-mcp analyze-projec index.ts generateProjectDocs path traversal4.8 Medium
- astralisone rive-mcp-server-coreastralisone rive-mcp-server-core importRiveFile Flow importRiveFile.ts path traversal4.8 Medium
- abrinsmead mindpilot-mcpabrinsmead mindpilot-mcp HistoryService path traversal4.8 Medium
- aaronsb memory-graphaaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal4.8 Medium
- hulupeep mcp-ui-probeHulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal4.8 Medium
- jordy meow ai engineAI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription5.0 Medium
- kata-containersKata Containers: Config Path Annotation Arbitrary File Loading9.6 Critical
- aehrc pathlingPathling has path traversal in $result endpoint that allows arbitrary warehouse file read8.7 High
- aehrc pathlingPathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}8.7 High
- hashicorp consul, consul enterprise +1 moreAuthorization bypass for session deletion in the transaction API4.2 Medium
- go-gitgo-git: Malicious reference names may modify files outside the reference storage6.3 Medium
- Show moreLoading…