CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- jgraph drawio-desktop draw.io Desktop allows Windows executable search-path hijacking 7.8 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: Utility binary path can point at a shared storage directory 7.7 High
- asterisk, asterisk certified-asterisk +1 more Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location 6.9 Medium
- veeam agent for linux A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only... 7.3 High
- checkmk gmbh checkmk mk-oracle: Local privilege escalation via insecure Oracle Home library loading 5.2 Medium
- No product listed An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute... 10.0 Critical
- palo alto networks globalprotect app GlobalProtect App: Local Privilege Escalation Vulnerability on macOS 5.9 Medium
- adobe dimension Dimension | Untrusted Search Path (CWE-426) 8.6 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Setup Files Cleanup Elevation of Privilege Vulnerability 7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Servicing Stack Updates Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Setup Files Cleanup Elevation of Privilege Vulnerability 7.0 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 more Windows Update Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 more Windows Update Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 more Windows Update Service Elevation of Privilege Vulnerability 7.8 High
- microsoft .net framework 3.5 and 4.6.2/4.7/4.7.1/4.7.2, .net framework 3.5 and 4.7.2, .net framework 3.5 and 4.8 +4 more +6 more .NET Framework Security Feature Bypass Vulnerability 8.8 High
- flexera installshield Potential Privilege Escalation in InstallShield 5.4 Medium
- ibm aspera enterprise webapps IBM Aspera Enterprise Webapps Untrusted Search Path 7.8 High
- checkmk gmbh checkmk mk-oracle: Local privilege escalation via malicious Oracle Instant Client 5.2 Medium
- @backstage plugin-techdocs-node, backstage, linuxfoundation backstage plugin-techdocs-node +2 more Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend 7.7 High
- mitel mivoice office 400 Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution 8.4 High
- apache software foundation openoffice Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover 8.8 High
- artifex ghostscript Local Privilege Escalation in Ghostscript for Windows 7.0 High
- google fuse-archive Untrusted Search Path (PATH Hijacking) in fuse-archive 5.4 Medium
- openclaw OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows 5.4 Medium
- gnu libextractor GNU libextractor before 1.16 Privilege Escalation via LIBEXTRACTOR_PREFIX 7.3 High
- plesk, webpros plesk extension "plesk restful api" +1 more An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before... 8.7 High
- n8n-io n8n n8n before 1.123.76 Sandbox Escape via Git Relative URL 5.3 Medium
- palo alto networks globalprotect app GlobalProtect App: Local Privilege Escalation Vulnerabilities 5.9 Medium
- adobe acrobat, acrobat reader, acrobat 2024 +2 more +4 more Acrobat Reader | Untrusted Search Path (CWE-426) 4.0 Medium
- open-telemetry opentelemetry-dotnet-contrib OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS 7.0 High
- okta hyperdrive, hyperdrive integration plugin +1 more Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling 7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows Smart Card Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows Storage Elevation of Privilege Vulnerability 7.8 High
- openvpn OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local... 8.5 High
- kerberosmansour hulumi Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files 8.6 High
- jahlives openssl encrypt openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration 8.7 High
- adobe substance3d - painter, substance 3d painter +1 more Substance3D - Painter | Untrusted Search Path (CWE-426) 7.8 High
- nltk NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary 8.5 High
- ongres stackgres Untrusted Search Path in StackGres 9.9 Critical
- ibm aix, powervm vios, vios +2 more Vulnerabilities in IBM AIX and PowerVM VIOS 7.8 High
- ibm i IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty 8.8 High
- ibm i access client solutions IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities 7.3 High
- postgresql PostgreSQL amcheck does not clear untrusted search path 3.8 Low
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 more GlobalProtect App: Local Privilege Escalation Vulnerabilities 5.9 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 more Windows Narrator Braille Elevation of Privilege Vulnerability 7.8 High
- intel performance counter monitor Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version... 5.4 Medium
- intel battery life diagnostic tool Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within... 5.4 Medium
- mervinpraison praisonai, praisonaiagents +1 more PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code 7.8 High
- zucchetti s.p.a. firmacheck FirmaCheck < 1.3.16 DLL Hijacking via Unvalidated OpenSSL Configuration Path 8.5 High
- checkmal appcheck pro CheckMAL AppCheck Pro Kernel Mini-Filter Driver AppCheckD.sys uncontrolled search path 7.3 High
- Show olderLoading…