CWE-73: External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- icewhaletech zimaosZimaOS: Arbitrary Deletion of Internal System Files via API Path Manipulation8.6 High
- icewhaletech zimaosZimaOS: Unauthorized Creation of Files/Folders in Restricted System Directories via API8.6 High
- videolan vlc for androidVLC for Android < 3.7.0 Remote Access Path Traversal2.3 Low
- traccarTraccar vulnerable to Path Traversal and External Control of File Name or Path6.5 Medium
- cloudhypervisor cloud hypervisor, cloud-hypervisor +1 moreCloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse9.1 Critical
- alex4ssb adb explorer, adb-explorer +1 moreADB Explorer is Vulnerable to Arbitrary Directory Deletion via Command-Line Argument7.1 High
- devolutions server, music-assistant music assistant server +1 moreMusic Assistant Server Path Traversal in Playlist Update API Allows Remote Code Execution8.8 High
- kaleidos penpotPenpot has Arbitrary File Read via create-font-variant RPC endpoint7.5 High
- dell powermax, unisphere for powermax +1 moreDell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path...8.1 High
- dell powermax, unisphere for powermax +1 moreDell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path...8.8 High
- dell powermax, unisphere for powermax +1 moreDell Unisphere for PowerMax, version(s) 10.2, contain(s) an External Control of File Name or Path...6.5 Medium
- openclawOpenClaw hardened the skill download target directory validation6.8 Medium
- openclawOpenClaw < 2026.2.14 - Local File Inclusion via mediaPath Parameter in BlueBubbles Media Handling8.2 High
- gnome evolution data server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreEvolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling5.6 Medium
- openclawOpenClaw < 2026.2.12 - Arbitrary File Write via Untrusted sessionFile Path7.1 High
- openstack nova, red hat openstack platform 13 (queens), openstack platform 16.2 +4 more +6 moreOpenStack Nova calls qemu-img without format restrictions for resize8.2 High
- tandoor recipesTandoor Recipes Affected by Authenticated Local File Disclosure (LFD) via Recipe Import leads to Arbitrary File Read4.9 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via improper configuration file handling3.3 Low
- infoblox niosIn Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via...7.7 High
- google keras, red hat openshift ai (rhoai) +1 moreArbitrary File Read in Keras via HDF5 External Datasets7.1 High
- red hat enterprise linux 6, hardened images, siemens ruggedcom rst2428p +2 moreBusybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries7.0 High
- red hat enterprise linux 6, hardened images, siemens ruggedcom rst2428p +2 moreBusybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization7.0 High
- qnap file station, qnap systems inc. file station 5 +1 moreFile Station 54.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows NTLM Spoofing Vulnerability3.3 Low
- calibre-ebook calibrecalibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution8.2 High
- qdrantQdrant affected by arbitrary file write via `/logger` endpoint8.6 High
- No product listedAn arbitrary file overwrite vulnerability in the file import process of Comic Book Reader v1.0.95...8.1 High
- luiswang webtareaswebTareas 2.0.p8 - Arbitrary File Deletion7.2 High
- i-doit gmbh open source cmdbi-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion7.2 High
- unstructuredUnstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write9.8 Critical
- h2oai h2oai/h2o-3Remote Arbitrary File Write with Arbitrary Data in h2oai/h2o-39.1 Critical
- lobehub lobe-chatLobeHub Vulnerable to Improper Authorization in Presigned Upload5.7 Medium
- hestia control panel control panelHestia Control Panel 1.3.2 - Arbitrary File Write8.6 High
- nodebb plugin emojiNodeBB Plugin Emoji 3.2.1 - Arbitrary File Write8.6 High
- meddream pacs premium, pacs server +1 moreAn arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS...9.6 Critical
- aiven-open bigquery-connector-for-apache-kafkaArbitrary File Read in Google BigQuery Sink connector7.7 High
- donknap dpanelDPanel has an arbitrary file deletion vulnerability in /api/common/attach/delete interface8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows Telephony Service Elevation of Privilege Vulnerability8.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreNTLM Hash Disclosure Spoofing Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreNTLM Hash Disclosure Spoofing Vulnerability6.5 Medium
- dfir-iris iris, iris-web +1 moreIris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management9.6 Critical
- roxnor emailkit – email customizer for woocommerce & wpEmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal6.5 Medium
- parall jspdf, red hat advanced cluster security 4, advanced cluster security 4.8 +1 more +3 morejsPDF has Local File Inclusion/Path Traversal vulnerability9.2 Critical
- qnap hybrid backup sync, qnap systems inc. hbs 3 hybrid backup sync +1 moreHBS 3 Hybrid Backup Sync7.0 High
- https://github.com/kde/ smb4kLocal users can perform a local root exploit via smb4k mounthelper7.3 High
- wpvividplugins wpvivid — backup, migration & stagingMigration, Backup, Staging – WPvivid Backup & Migration <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation2.7 Low
- langflowLangflow Vulnerable to External Control of File Name or Path7.1 High
- vitejs vite-plugin-react@vitejs/plugin-rsc has Arbitrary File Read via `/__vite_rsc_findSourceMapURL` Endpoint on Development7.5 High
- c4illin convertxConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Execution8.8 High
- wpusermanager wp user manager – user profile builder & membershipWP User Manager <= 2.9.12 - Authenticated (Subscriber+) Arbitrary File Deletion via 'current_user_avatar' Parameter6.8 Medium
- Show moreLoading…