CVE-2026-47253
🗓️ 14 Sep 2026 19:54:24Reported by GitHub_MType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 74 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | Anyquery clear_plugin_cache() DoS | 17 Sep 202600:00 | – | bdu_fstec |
 | CVE-2026-47253 | 9 Jun 202621:19 | – | circl |
 | CVE-2026-47253 Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion | 14 Sep 202619:54 | – | cvelist |
 | EUVD-2026-77807 | 14 Sep 202619:54 | – | euvd |
 | Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion | 10 Jun 202617:11 | – | github |
 | CVE-2026-47253 | 14 Sep 202619:54 | – | mend |
 | CVE-2026-47253 | 14 Sep 202620:16 | – | nvd |
 | CVE-2026-47253 Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion | 14 Sep 202619:54 | – | osv_cve |
| GHSA-J9RX-RPPG-6HH4 Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion | 10 Jun 202617:11 | – | osv_ghsa |
| GO-2026-5459 Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion in github.com/julien040/anyquery | 25 Jun 202622:34 | – | osv_go |
10
[
{
"vendor": "julien040",
"product": "anyquery",
"versions": [
{
"version": "< 0.4.5",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| clear_plugin_cache(plugin) | request body | /v1/query | A low-privileged bearer-token holder can invoke the clear_plugin_cache(plugin) SQL scalar function via the /v1/query endpoint. The 'plugin' parameter is passed to os.RemoveAll without proper sanitization, allowing for path traversal and recursive deletion of files outside the intended directory. | CWE-22 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Sep 2026 19:08Current
7.6High risk
Vulners AI Score7.6
CVSS 3.17.3
EPSS0.00441
SSVC