Linux Distros Unpatched Vulnerability : CVE-2026-79318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile...

CVE-2026-79318

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile applications/admin/controllers/webservices.py...

UBUNTU-CVE-2026-79318

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile applications/admin/controllers/webservices.py...

CVE-2026-79318

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile applications/admin/controllers/webservices.py...

CVE-2026-79318: Improper Limitation of a Pathname to a Restricted Directory

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile applications/admin/controllers/webservices.py...

CVE-2026-79318

The software web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d ) is vulnerable to a Directory Traversal flaw. The root cause is located within the read_file() and write_file() functions in the applications/admin/controllers/webservices.py component. This vulnerability could all...

CVE-2026-79318

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile applications/admin/controllers/webservices.py...

CVE-2026-79318

web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile applications/admin/controllers/webservices.py...

CVE-2026-84201

appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the writefile and writefilesbatch tools, allowing attackers to write files outside the intended PROJECTROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite...

CVE-2026-84201 appium-mcp-server through 0.1.61 Path Traversal in write_file and write_files_batch

appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the writefile and writefilesbatch tools, allowing attackers to write files outside the intended PROJECTROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite...

CVE-2026-84201 appium-mcp-server through 0.1.61 Path Traversal in write_file and write_files_batch

appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the writefile and writefilesbatch tools, allowing attackers to write files outside the intended PROJECTROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite...

CVE-2026-84201

appium-mcp-server through 0.1.61 is affected by a path traversal vulnerability in the write_file and write_files_batch tools. The server fails to validate or normalize file paths, allowing an attacker to supply absolute paths or relative paths with parent-directory segments to write files outside...

EUVD-2026-69288

appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the writefile and writefilesbatch tools, allowing attackers to write files outside the intended PROJECTROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite...

CVE-2026-84201: Improper Limitation of a Pathname to a Restricted Directory

appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the writefile and writefilesbatch tools, allowing attackers to write files outside the intended PROJECTROOT directory. Attackers can supply absolute paths or relative paths with parent directory segments to overwrite...

CVE-2026-47397: Improper Limitation of a Pathname to a Restricted Directory

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, hidden metadata in a webpage causes PraisonAI agents to write attacker-controlled content to arbitrary paths. writefile skips path validation when workspace=None always None in production. Version 4.6.40 fixes the issue...

CVE-2026-16130 nearai ironclaw write_file path_utils.rs validate_path link following

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validatepath of the file src/tools/builtin/pathutils.rs of the component writefile. The manipulation leads to link following. Local access is required to approach this attack. The exploit is...

CVE-2026-16130

CVE-2026-16130 affects nearai ironclaw up to 0.29.1. The vulnerability resides in the function validate_path within src/tools/builtin/path_utils.rs of the write_file component, enabling link following under local access. The public exploit is available, and a patch is identified by the commit/pat...

CVE-2026-16130 nearai ironclaw write_file path_utils.rs validate_path link following

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validatepath of the file src/tools/builtin/pathutils.rs of the component writefile. The manipulation leads to link following. Local access is required to approach this attack. The exploit is...

CVE-2026-16130: Improper Link Resolution Before File Access

A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validatepath of the file src/tools/builtin/pathutils.rs of the component writefile. The manipulation leads to link following. Local access is required to approach this attack. The exploit is...

CVE-2026-10278: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was determined in ishayoyo excel-mcp up to 1.0.2. Impacted is an unknown function of the file src/index.ts of the component readfile/writefile. Executing a manipulation of the argument filePath/outputPath can lead to path traversal. It is possible to launch the attack remotely. Th...