CVE-2026-89039 is a path traversal vulnerability in Grafana's mcp-k6 component that allows an authenticated caller with limited privileges to read arbitrary files on the server. By invoking the convert_playwright_script prompt and passing a crafted file path, an attacker can bypass directory restrictions using symbolic links and access sensitive files such as SSH keys and cloud credentials. This vulnerability affects versions 0.3.0 through before 0.7.0 of mcp-k6.
CVE-2026-63266 is a path traversal vulnerability in LibreOffice Calc version 26.2. It involves linking a cell range to an external data source, allowing a document to open an embedded Firebird database that could write files to any location writable by the user. Fixed versions restrict the embedded Firebird database to operate only within its private directory.
DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration.
The specific flaw exists within the backup restoration mechanism, which fails to properly validate the paths, file types, integrity, and authenticity of files contained within a restored TGZ archive. The application does not perform file-signature verification before extracting the archive, allowing a specially crafted backup to contain attacker-controlled files.
An attacker with access to the backup SFTP or other configured repository can therefore provide a malicious TGZ archive that, when restored by the system, may place arbitrary files on the underlying Linux system. Depending on the location and permissions of the extracted files, this behavior can potentially be leveraged to achieve arbitrary code execution with root privileges and compromise the underlying virtual machine.
The absence of enforced backup passwords further reduces the protection provided by the backup mechanism and may facilitate unauthorized access to the repository.
The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). Exploitation requires at least one File-type custom field to be published on the confirmation page shortcode, as this field is not created by default during plugin installation.
The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its translation file routes will read, allowing users granted the Loco Translate WordPress plugin before 2.8.9's translator capability to retrieve the contents of files of certain types from anywhere on the server, including outside the web root.
The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing authenticated users with access to its asset-management feature (Administrators by default, or Editors when a non-default Unlimited Elements for Elementor WordPress plugin before 2.0.21 setting is enabled) to write arbitrary files, including executable PHP, outside the intended upload directory on servers where the PHP zip extension is unavailable, leading to Remote Code Execution.
The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and copying that file into a publicly accessible uploads folder. This makes it possible for users with the Editor role and above to read the contents of arbitrary files on the server, with the copied file then retrievable by unauthenticated visitors.
CVE-2026-104871 is a path traversal vulnerability in Angular CLI's server-side rendering (SSR) tool affecting Windows deployments. It allows an unauthenticated attacker to retrieve sibling prerendered HTML pages under specific conditions involving relative request URLs with backslash parent-traversal segments. The issue is fixed in Angular CLI versions 20.3.36, 21.2.23, and 22.1.7.
Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target package manifest without validating that it is a contained relative path. A hostile direct dependency or a package introduced through a trusted package's packageGroup can supply .. segments or an absolute path, causing nx migrate to join an escaping destination onto its temporary directory. The migration archive can then write attacker-controlled bytes outside the temporary directory, while opening the destination stream can truncate an existing writable file even when no archive entry matches. This occurs during migration planning before review of the migration list or use of --run-migrations; the vulnerable installed Nx copy is reached when the normal nx@latest handoff is bypassed with NX_USE_LOCAL, NX_MIGRATE_USE_LOCAL, NX_MIGRATE_CLI_VERSION, --run-id, or fallback after a temporary-install failure. This issue is fixed in versions 22.7.10 and 23.2.1.
CVE-2026-103648 is a critical path traversal vulnerability in demsking image-downloader version 4.3.0 and earlier. It allows an attacker who can control the download URL to write downloaded data outside the intended destination directory, potentially leading to arbitrary file overwrite. This vulnerability has a high CVSS score of 9.1, indicating severe impact on integrity and availability without requiring privileges or user interaction.
uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows hosts are not affected. This issue is fixed in version 0.12.18.
CVE-2026-104721 is a path-traversal vulnerability in the Logback-classic module by QOS.CH Sarl. It arises when an MDC-based discriminator value is used unsanitized in a nested FileAppender path, allowing an attacker who can influence the MDC value (for example, via an HTTP header) to create or append log files outside the intended directory. This affects Logback-classic versions from 0.9.14 through 1.6.4. The vulnerability is similar to CVE-2026-19880 but involves different attack techniques.
CVE-2026-55393 is a critical path traversal vulnerability in Teledyne FLIR Aware2 software versions up to 6.9.0.2 (PackBot) and 1.7.9 (FirstLook). It allows remote unauthenticated attackers to read sensitive configuration and security parameters via the web interface by exploiting unvalidated pathnames. This affects both PackBot and FirstLook robots running the vulnerable software versions.
CVE-2026-55231 is a path traversal vulnerability in givanz Vvveb CMS versions prior to 1.0.8.6. An authenticated admin-panel user with backup access (site_admin role or higher) can exploit a flawed path sanitizer to read and delete arbitrary files on the server. This allows exposure of sensitive files such as database credentials and system files, and deletion of critical configuration files to force a site reinstall and potential takeover. The vulnerability is patched in version 1.0.8.6.
Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones each student's assignment repository and then writes autograde artifacts (`result.json` and `results.json`) into the just-cloned working tree. The write followed symlinks, so a student who committed `result.json` or `results.json` as a **symlink** (materialized verbatim by `git clone`) could redirect the teacher's write to an arbitrary path — e.g. `~/.zshrc`, `~/.ssh/authorized_keys`, a cron file, or an in-clone `.git/hooks/*` file that git subsequently executes. The written bytes are attacker-controlled (the student's uploaded release asset for `result.json`; student-chosen submit-tag names for `results.json`). This is an arbitrary file write leading to code execution as the teacher, whose `gh` token carries `admin:org`, `repo`, and `workflow` across the entire classroom organization. Version 1.11.0 contains a patch. Some workarounds are available. Avoid running `gh teacher download` against untrusted student repositories, or run it inside a disposable sandbox / container with no access to sensitive host files or credentials. Inspect cloned trees for symlinked, hardlinked, or special (`result.json`/`results.json`) entries before allowing the artifact-refresh step to run.
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters.
If the device receives a specially crafted, malicious request, it may trigger unintended processing.
CVE-2025-41753 is a critical path traversal vulnerability in the WAGO 0751-9x01 device. The vulnerability arises because the object name of a dynamically created BACnet File Object is used as a file path without proper validation. This allows an unauthenticated remote attacker to traverse directories outside the intended restricted directory and read or overwrite arbitrary files on the device. Exploitation could lead to full system compromise.
A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code
CVE-2026-102116 is a path traversal vulnerability in Kiteworks Email Protection Gateway that allows an authenticated administrator to write files outside intended directories. This can lead to execution of arbitrary files by the application, potentially resulting in remote code execution with the privileges of the service account.