CVE-2026-27199-werkzeug-safe-join-bypass-PoC

CVE-2026-27199 PoC：Werkzeug safejoin Windows 设备名绕过 状态： 已公开披露。已在 werkzeug 3.1.6 中修复。 严重性： 中等 报告者： @alimezar 安全公告： GHSA-29vq-49wr-vm6x 受影响版本 包| 受影响| 已修复 ---|---|--- werkzeug| 要求： Windows、Python 3.8+、werkzeug None 已正确阻止 ! safejoinbase, 'subdir/NUL' - C:...\subdir\NUL 绕过成功! 尝试写入返回的路径 ... ! open嵌套 NUL...

Improper Limitation Of A Pathname To A Restricted Directory

Werkzeug is vulnerable to Improper Limitation of a Pathname to a Restricted Directory. The vulnerability is due to safejoin failing to remove an empty NTFS Alternate Data Stream ADS marker before checking Windows device names, which allows an attacker to request a path ending in NUL: and cause th...

GHSA-G6X2-HCCM-HH4M Werkzeug safe_join() allows Windows special device names

Werkzeug's safejoin function allows Windows device names as filenames when they have an empty ADS marker on NTFS. This was previously reported as https://github.com/pallets/werkzeug/security/advisories/GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact Windows allows...

EUVD-2026-88980

Werkzeug safejoin allows Windows special device names...

Werkzeug safe_join() allows Windows special device names

Werkzeug's safejoin function allows Windows device names as filenames when they have an empty ADS marker on NTFS. This was previously reported as https://github.com/pallets/werkzeug/security/advisories/GHSA-hgf8-39gv-g3f2, but the added filtering failed to account for the fact Windows allows...

Linux Distros Unpatched Vulnerability : CVE-2026-102598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path...

SUSE CVE-2026-102598

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-102598

A flaw was found in werkzeug. A remote attacker can cause a Denial of Service DoS when an application runs on Windows systems using the NTFS file system. By supplying a file path containing a reserved Windows device name with an Alternate Data Stream ADS marker, an attacker can bypass path...

Improper Handling of Windows Device Names

Overview Affected versions of this package are vulnerable to Improper Handling of Windows Device Names via safejoin on Windows, which fails to block special Windows device names e.g. CON, NUL, AUX when an empty Alternate Data Stream ADS marker : is appended to the name. An attacker can supply a...

AZL-105921 CVE-2026-102598 affecting package tensorflow 2.16.1-11

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

AZL-105681 CVE-2026-102598 affecting package python-werkzeug 3.0.3-2

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

AZL-105654 CVE-2026-102598 affecting package python-tensorboard 2.16.2-6

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-102598

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-102598

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

UBUNTU-CVE-2026-102598

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-102598 Werkzeug safe_join() allows Windows special device names

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-102598 Werkzeug safe_join() allows Windows special device names

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-102598

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-102598 Werkzeug safe_join() allows Windows special device names

Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safejoin function used by sendfromdirectory can allow a NUL: special-device path because safejoin checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs o...

CVE-2026-102598

The Werkzeug WSGI web application library (prior to version 3.1.9 ) contains a vulnerability in the safe_join function used by send_from_directory . On Windows systems using NTFS , the function fails to remove empty NTFS ADS markers before checking for Windows device names. This allows an attacke...