JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved to, with no validation of location, symlink target, file size, or file format. This vulnerability is fixed in 0.x.y-security-1.
External control of a file name in Ivanti Xtraction before version 2026.2 allows a remote authenticated attacker to read sensitive files and write arbitrary HTML files to a web directory, leading to information disclosure and possible client-side attacks.
Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's write_txt, write_csv, write_json, and (commented-but-shipping) scan_file helpers open their output as open(f"{user}.<ext>"), where user comes unsanitized from the -u CLI flag or any line of a -U usernames file. A username that contains path-separator sequences (.., /, \, or an absolute path) causes tookie-osint to write the scan output to an arbitrary path the invoking user has write permission for. This vulnerability is fixed in 4.1fix.
CVE-2026-42845 is a high-severity vulnerability in the Grav CMS form plugin (grav-plugin-form) versions prior to 9.1.0. It allows unauthenticated attackers to overwrite page content via crafted file uploads due to insufficient sanitization of uploaded filenames. This could enable an attacker to overwrite the page's own markdown (. md) files and potentially escalate privileges to super-admin through a subsequent save action. The vulnerability is fixed in version 9.1.0 by stripping path components from filenames and blocking critical page-content extensions regardless of configuration.
i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes the lng and ns options directly into the configured loadPath / addPath templates and then read / write the resulting file from disk. The interpolation is unencoded and unvalidated, so a crafted lng or ns value — containing .., a path separator, a control character, a prototype key, or simply an unexpectedly long string — allows an attacker who can influence either value to read or overwrite files outside the intended locale directory. When lng / ns are derived from untrusted input (request-scoped i18next instances behind an HTTP layer such as i18next-http-middleware, or any framework that lets the end user pick the language via query string, cookie, or header), a single request such as ?lng=../../../../etc/passwd causes the backend to attempt to read that path. This issue has been patched in version 2.6.4.
SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local files and trigger deletion of files in the targeted directory with the privileges of the api.app process.
This update for busybox fixes the following issues:
Changes in busybox:
- CVE-2026-26157: Fixed arbitrary file overwrite and potential code execution via incomplete path sanitization. (bsc#1258163)
- CVE-2026-26158: Fixed arbitrary file modification and privilege escalation via unvalidated tar archive entries. (bsc#1258167)
A vulnerability in OpenStack Nova allows an authenticated user to overwrite arbitrary files on the compute host due to unconstrained handling of disk image formats by the qemu-img utility. This can lead to data destruction or denial of service during instance operations such as resizing. The issue affects certain versions of Red Hat OpenStack Services on OpenShift. No effective mitigation is currently available that meets Red Hat's criteria for ease of use and stability.
CVE-2026-4132 is a high-severity vulnerability in the zinoui HTTP Headers WordPress plugin up to version 1.19.2. It allows authenticated administrators to write arbitrary content, including PHP code, to arbitrary file paths on the server due to insufficient validation and sanitization of file path and username inputs. This can lead to remote code execution. No official patch or remediation guidance is currently available from the vendor.
A path traversal vulnerability exists in jupyter nbconvert versions 6.5 through 7.17.0 when the HTMLExporter.embed_images option is enabled. This flaw allows a malicious notebook to read arbitrary files from the host system by embedding them as base64 data URIs in the output HTML. The vulnerability is fixed in version 7.17.1. By default, HTMLExporter.
A path traversal vulnerability exists in jupyter nbconvert versions 6.5 through 7.17.0. The vulnerability arises from the ExtractAttachmentsPreprocessor component, which does not sanitize attachment filenames, allowing crafted filenames to write files outside the intended output directory. This enables an attacker to control the destination path and file extension of arbitrary files written to the filesystem. Version 7.17.1 includes a patch addressing this issue. The vulnerability has a medium severity with a CVSS score of 6.
SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation. In versions 0.17.4 and below, a compromised SecureDrop Server can achieve code execution on the Client's virtual machine (sd-app) by exploiting improper filename validation in gzip archive extraction, which permits absolute paths and enables overwriting critical files like the SQLite database. Exploitation requires prior compromise of the dedicated SecureDrop Server, which itself is hardened and only accessible via Tor hidden services. Despite the high attack complexity, the vulnerability is rated High severity due to its significant impact on confidentiality, integrity, and availability of decrypted source submissions. This issue is similar to CVE-2025-24888 but occurs through a different code path, and a more robust fix has been implemented in the replacement SecureDrop Inbox codebase. The issue has been fixed in version 0.17.5.
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-supplied engine name into a filesystem path without filtering path separators or .. components. An authenticated user with CREATE FUNCTION privileges can use a crafted ENGINE name to load an arbitrary shared library from anywhere on the filesystem via path traversal. The library's initialization code executes immediately during loading, before Firebird validates the module, achieving code execution as the server's OS account. This issue has been fixed in versions 5.0.4, 4.0.7 and 3.0.14.
Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on TCP port 1208 that accepts unsanitized file paths in the ReadLicense action's LFName parameter, allowing remote attackers to trigger SMB connections and leak NTLMv2 machine-account hashes. Attackers can submit crafted SOAP requests with UNC paths to force the server to initiate outbound SMB connections, exposing authentication credentials that may be relayed for privilege escalation or lateral movement within the network.
CVE-2026-21012 is a medium severity vulnerability in Samsung Mobile Devices affecting the AODManager component prior to the SMR April 2026 Release 1. It involves external control of the file name or path, allowing a privileged local attacker to create files with system privileges. The vulnerability requires local privileged access and does not involve user interaction. No official patch or remediation level has been confirmed yet.
The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.2. This is due to a two-step logic flaw: the topic_add() and topic_edit() action handlers accept arbitrary user-supplied data[*] arrays from $_REQUEST and store them as postmeta without restricting which fields may contain array values. Because 'body' is included in the allowed topic fields list, an attacker can supply data[body][fileurl] with an arbitrary file path (e.g., wp-config.php or an absolute server path). This poisoned fileurl is persisted to the plugin's custom postmeta database table. Subsequently, when the attacker submits wpftcf_delete[]=body on a topic_edit request, the add_file() method retrieves the stored postmeta record, extracts the attacker-controlled fileurl, passes it through wpforo_fix_upload_dir() which only rewrites legitimate wpforo upload paths and returns all other paths unchanged, and then calls wp_delete_file() on the unvalidated path. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files writable by the PHP process on the server, including critical files such as wp-config.
Chamilo LMS is a learning management system. Prior to 1.11.38, there is a path traversal in main/exercise/savescores.php leading to arbitrary file feletion. User input from $_REQUEST['test'] is concatenated directly into filesystem path without canonicalization or traversal checks. This vulnerability is fixed in 1.11.38.
Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. By sending a crafted request with a malicious model_path parameter, an attacker can force the server to attempt loading any file as an ONNX model, revealing file existence, permissions, and potentially file contents through error messages. This vulnerability is fixed in 2.0.75.
CVE-2025-65115 is a high-severity remote code execution vulnerability affecting multiple versions of Hitachi's JP1/IT Desktop Management 2 - Manager and related products on Windows. The issue involves external control of file name or path (CWE-73), which can lead to unauthorized code execution. Affected versions span a wide range of releases from 09-00 through 13-50 with various subversions impacted. The CVSS 3.1 base score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor, and no known exploits in the wild have been reported.
CVE-2026-35174 is a critical path traversal vulnerability in the Chyrp Lite blogging engine prior to version 2026.01. It allows an administrator or a user with Change Settings permission to manipulate the uploads path to arbitrary directories. This enables unauthorized downloading of sensitive files such as configuration files containing database credentials and overwriting critical system files, potentially leading to remote code execution. The vulnerability is fixed in version 2026.01.