69585 matches found
CVE-2026-91771: Improper Limitation of a Pathname to a Restricted Directory
Weights & Biases wandb before 0.29.0 fails to validate the file name from server responses in the File.download function, allowing path traversal attacks. Attackers controlling the backend can supply file names with directory traversal sequences to write files outside the intended download...
CVE-2026-54077: Improper Limitation of a Pathname to a Restricted Directory
ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the IMPORT DATABASE statement in engine/src/main/java/com/arcadedb/query/sql/parser/ImportDatabaseStatement.java did not require administrative privileges and passed its source to...
Linux Distros Unpatched Vulnerability : CVE-2026-17495
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-stri...
CVE-2026-51134: Improper Limitation of a Pathname to a Restricted Directory
The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...
PT-2026-92044
Name of the Vulnerable Software and Affected Versions WordPress Design Scuole Italia theme affected versions not specified Description A path traversal issue exists in the reserved file check function within the functions.php file. This flaw allows an unauthenticated attacker to download arbitrar...
PT-2026-92054
Flowise versions before 3.1.4 fail to validate file paths in the SQL Database Chain node when connecting to SQLite databases, allowing authenticated attackers to write arbitrary files. Attackers can write malicious SQLite databases to system directories or inject files into the web root to execut...
Linux Distros Unpatched Vulnerability : CVE-2026-79705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can...
Linux Distros Unpatched Vulnerability : CVE-2026-15789
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs t...
CVE-2026-54561: Improper Limitation of a Pathname to a Restricted Directory
MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, contextimport in src/index.ts passes the caller-controlled filePath directly to fs.readFileSync without restricting the path to an export directory. An MCP client, including an LLM agent...
CVE-2026-48785: Improper Limitation of a Pathname to a Restricted Directory
Apptainer is an open source container platform. Prior to version 1.5.1, Image.AuthorizedPath applies plain string-prefix matching to the limit container paths directive in apptainer.conf, so an allowed path such as /data/safe also authorizes a sibling path such as /data/safe-but-unsafe. A local...
CVE-2026-87791: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the reservedfilecheck function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process...
CVE-2026-91989: Improper Limitation of a Pathname to a Restricted Directory
atomic-agents-stack before 1.1.0 contains a path traversal vulnerability in the dashboard HTTP server that allows remote attackers to read arbitrary files by supplying directory traversal sequences in request paths. Attackers can bypass path containment checks by including '../' segments in...
CVE-2026-57442: Improper Limitation of a Pathname to a Restricted Directory
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and nodemodules path segments do not match the restriction and pass both...
CVE-2026-55828: Improper Limitation of a Pathname to a Restricted Directory
qbee transport is a remote access transport protocol implementation. Prior to 1.26.25, the extractTar routine uses strictly lexical path validation that does not account for on-disk symlinks created earlier in the extraction process. A crafted tar archive can use a symlink chain to write or...
PT-2026-91861
Name of the Vulnerable Software and Affected Versions moment versions 2.29.2 through 2.30.1 Description A path-traversal issue exists when a specially crafted non-string object is passed to the moment.locale function. The internal guard assumes the input is a string; however, an object with a mat...
CVE-2026-17495: Path Traversal: 'dir/../../filename'
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. In versions 2.29.2 through 2.30.1, a specially crafted non-string object passed to moment.locale can bypass the locale-name path-traversal guard. The guard assumes the input is a string, so an object...
Linux Distros Unpatched Vulnerability : CVE-2026-55846
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the HTTP server started by allure serve and allure...
CVE-2026-91751: Improper Limitation of a Pathname to a Restricted Directory
Flextype CMS through 1.0.0-alpha.3 fails to properly validate id and newid parameters in the Entries REST API, allowing API token holders to read, create, or overwrite files outside the entries directory. Attackers can use traversal sequences in API requests to escape the project entries director...
CVE-2026-79705: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not...
