ROS-20260506-73-0043

Vulnerability in erlang related to incorrect restriction of path name to restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

PT-2026-38244

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.15 Description An arbitrary file read issue exists in the QMD backend memory get function. Attackers with access to the memory tool can bypass path restrictions by providing arbitrary workspace Markdown paths,...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an incorrect restriction on the path name to the restricted-access catalog, allowing a violator to read and modify arbitrary files.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect restriction on the path name when accessing a restricted catalog during the processing of parameters sessionId and sessionFile. Exploiting this vulnerability allows an attacker to read and...

ROS-20260506-73-0010

Vulnerability in helm related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote intruder to gain unauthorized access to protected information...

The vulnerability of the decompress_files() function on the platform for security monitoring and threat detection by Wazuh allows a perpetrator to execute arbitrary code.

The vulnerability of the decompressfiles function on the Wazuh security monitoring and threat detection platform is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an incorrect restriction on the path name to the catalog, allowing attackers to write arbitrary files.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

ROS-20260430-73-0005

Vulnerability in buildkit related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the zip.vim plugin for the Vim text editor, which allows a hacker to execute arbitrary commands.

The vulnerability of the zip.vim plugin for the Vim text editor is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a perpetrator to execute arbitrary commands...

EUVD-2026-24481

Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check...

UBUNTU-CVE-2026-32147

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to modify file attributes outside the configured chroot directory. The SFTP daemon sshsftpd stores the raw, user-supplied path in file...

The vulnerability of the keras.utils.get_file() function in the Keras library allows a hacker to execute arbitrary code.

The vulnerability of the keras.utils.getfile function in the Keras library is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the software for coordinating the operation of cybersecurity systems and for managing real-time incident responses in Fortinet FortiSOAR arises from incorrect restrictions on the path to the catalog. This allows attackers to influence the confidentiality of the protected information.

The vulnerability of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to...

OpenClaw: QMD memory_get restricts reads to canonical or indexed memory paths

Summary The QMD backend memoryget read path accepted arbitrary workspace Markdown paths that were inside the workspace but outside the canonical memory locations or indexed QMD result set. Impact When the QMD backend was enabled, a caller with access to memoryget could read arbitrary .md files...

OESA-2026-1979 golang security update

. Security Fixes: url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.CVE-2026-25679 On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which...

The vulnerability of the Cisco Identity Services Engine (ISE) policy management platform, related to an incorrect limitation on the path name to the restricted access catalog, allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Identity Services Engine ISE platform relates to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

ROS-20260417-73-0028

Vulnerability in rubygem-rack related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

ROS-20260417-73-0013

A vulnerability in the commonprefix function of the pip module of the Python programming language is related to an incorrect directory path name restriction. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to add and modify arbitrary files...

The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system allows a violator to delete any arbitrary directory.

The vulnerability of the graphical user interface of the FortiSandbox threat detection and mitigation system is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete any directory by sending speciall...

The vulnerability of the libssh library, related to incorrect pathname restrictions for the directory, allows attackers to gain unauthorized access to protected information.

The vulnerability of the libssh library is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the web-based tool for centralized control and configuration of QLogic adapters in the Marvell QConvergeConsole system exists due to an incorrect limitation on the path name to the restricted access catalog. This vulnerability allows attackers to disclose sensitive information that is protected by this system.

The vulnerability of the web-based tool for centralized control and configuration of QLogic adapters in the Marvell QConvergeConsole is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to disclose...