CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,092 vulnerabilities with CWE-22
CVE-2026-42213
MEDIUM
SolidCAM-GPPL-IDE: Path traversal in `inc` directive enables file probing and NTLM-hash leak
CVE-2026-7807
HIGH
SmarterTools SmarterMail < Build 9560 Server Local File Inclusion via the /api/v1/report/summary/{type} API
CVSS 8.1
CVE-2026-42028
MEDIUM
novaGallery: Unauthenticated Path Traversal in Album and Cached Image Routes Allows Reading Images Outside Gallery Root
CVSS 5.3
CVE-2026-41887
MEDIUM
Flarum: Path traversal in LESS parser via theme color settings (incomplete fix for CVE-2023-27577)
CVSS 4.9
CVE-2026-38360
CRITICAL
dash-uploader 0.1.0-0.7.0a2 - Path Traversal
CVSS 9.8
CVE-2026-42353
HIGH
Path traversal / SSRF in i18next-http-middleware via user-controlled language and namespace parameters
CVSS 8.2
CVE-2026-41885
MEDIUM
Path traversal / URL injection via unsanitised lng/ns/projectId/version in i18next-locize-backend
CVSS 6.5
CVE-2026-41693
HIGH
i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite
CVSS 8.2
CVE-2026-41690
HIGH
Prototype pollution and path traversal in i18next-http-middleware via user-controlled language and namespace parameters
CVSS 8.6
CVE-2026-44340
HIGH
PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`
CVSS 7.5
CVE-2026-44336
CRITICAL
PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection
CVSS 9.6
CVE-2026-41493
HIGH
yard: Possible arbitrary path traversal and file access via yard server
CVSS 7.5
CVE-2026-41491
HIGH
Dapr: Service Invocation path traversal ACL bypass
CVSS 8.1
CVE-2026-8069
HIGH
PredatorSense V3: Local Privilege Escalation (LPE) vulnerability
CVE-2026-44298
MEDIUM
Kimai: Arbitrary file read in invoice PDF renderer (admin)
CVSS 4.1
CVE-2026-43940
HIGH
electerm: Path traversal in electerm runWidget leads to arbitrary code execution
CVSS 8.4
CVE-2026-42275
HIGH
zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write
CVSS 8.7
CVE-2026-8116
MEDIUM
huangjunsen0406 xiaozhi-mcphub dxtController.ts path traversal
CVSS 6.3
CVE-2026-8115
MEDIUM
gyoridavid short-video-maker REST API rest.ts path traversal
CVSS 5.3
CVE-2026-8113
MEDIUM
8421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal
CVSS 4.3
CVE-2026-41691
MEDIUM
i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns
CVSS 6.5
CVE-2026-44243
HIGH
GitPython: Path traversal in GitPython reference APIs allows arbitrary file write and delete outside the repository
CVSS 7.1
CVE-2026-41589
CRITICAL
Wish has SCP Path Traversal that allows arbitrary file read/write
CVSS 9.6
CVE-2026-7252
HIGH
WP-Optimize <= 4.5.2 - Authenticated (Author+) Arbitrary File Deletion via 'original-file' Post Meta
CVSS 8.1
CVE-2026-41656
MEDIUM
Admidio: Path Traversal via Unvalidated `name` Parameter in Document Add Mode Enables Arbitrary Server File Read
CVSS 4.5
Details
Vulnerabilities
9,092
Exploit Likelihood
High