CVE-2026-87723 is an untrusted search path vulnerability in Google fuse-archive versions prior to 1.24. An attacker who can manipulate the PATH environment variable or place a malicious binary in a writable directory within PATH can hijack the execution flow to run arbitrary local code with the privileges of the user running fuse-archive. The vulnerability was partially mitigated in version 1.22 and fully fixed in version 1.24 by implementing refined selective PATH filtering.
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7.
CVE-2026-0307 is a local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app for Windows, macOS, and Linux. It allows a local non-administrative user to escalate privileges to SYSTEM on Windows or root on macOS and Linux by exploiting an untrusted search path issue. The vulnerability does not affect the GlobalProtect app on iOS, Android, or ChromeOS. The CVSS 4.0 score is 5.9, indicating medium severity.
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
An untrusted search path vulnerability exists in the OpenTelemetry.Resources.Host NuGet package for macOS hosts prior to version 1.16.0-beta.2. The vulnerability arises because the host.id resource attribute detector launches the 'sh' and 'ioreg' executables by bare name, relying on the PATH environment variable for resolution. A local attacker with lower privileges who can manipulate the PATH or write to a directory earlier in the PATH can execute arbitrary binaries in the application's security context, leading to local code execution or privilege escalation. This issue affects only macOS hosts; Linux and Windows are not impacted. The vulnerability is patched in version 1.16.0-beta.2. No known workarounds are available.
CVE-2026-69785 is a vulnerability in Windows Smart Card on Microsoft Windows 10 Version 1607 and other versions. It involves an untrusted search path that allows an authorized local attacker to elevate privileges. The flaw has been assigned a high severity with a CVSS score of 7.8. Microsoft has issued official fixes for affected versions.
CVE-2026-69328 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 involving an untrusted search path in Windows Storage. This flaw allows a local authorized attacker to elevate privileges by exploiting how the system searches for executables or libraries. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. An official fix is available from Microsoft.
Adobe Substance3D - Painter has an Untrusted Search Path vulnerability (CWE-426) that could allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a high severity score of 7.8. No patch or official remediation has been confirmed yet.
CVE-2026-78155 is a critical privilege escalation vulnerability in the StackGres operator by OnGres. It involves an untrusted search path issue (CWE-426) that allows a low-privilege tenant who owns a database to escalate their privileges to administrator level. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation information is currently available. There are no known exploits in the wild at this time.
CVE-2026-55769 is a critical vulnerability in cloudnative-pg prior to versions 1.28.4 and 1.29.2. It involves an untrusted search path issue where superuser connections were opened without pinning the search_path, allowing roles with DATABASE OWNER privileges to execute attacker-controlled functions as the PostgreSQL superuser. This flaw enables privilege escalation to superuser, operating system command execution, and access to sensitive pod tokens. The issue is fixed in versions 1.28.4, 1.29.2, and 1.30.0.
CVE-2026-16869 is a high severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1. It involves an untrusted search path issue where improperly scrubbed environment variables could allow a local attacker to execute arbitrary code. The vulnerability has a CVSS 3.1 score of 7.8, indicating significant confidentiality, integrity, and availability impact. No vendor patch or remediation information is currently provided.
CVE-2026-16674 is a high-severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It involves an untrusted search path issue that could allow a remote authenticated attacker to execute arbitrary code. The vulnerability has a CVSS score of 8.8, indicating a significant risk to confidentiality, integrity, and availability. No official patch or remediation guidance has been provided yet.
IBM i Access Client Solutions versions 1.1.2.0 through 1.1.9.13 on Windows are vulnerable to arbitrary code execution due to an untrusted search path caused by a publicly writable directory when installed for all users. This vulnerability allows a local attacker with limited privileges to execute code with the privileges of the user running the application. The vulnerability is tracked as CVE-2026-14875 and has a high severity rating with a CVSS score of 7.3.
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
PraisonAI versions 3.9.26 through 4.6.57 and praisonaiagents versions 0.12.12 through 1.6.57 contain a code injection vulnerability in the workflow "include" feature. The vulnerability arises because the _execute_include() function imports and executes an included recipe's tools.py file without enforcing security gates or using a safe loader. This allows arbitrary Python code execution if an attacker can cause a workflow to include an untrusted local recipe. The issue is fixed in versions 4.6.58 and 1.6.58 respectively.
Ouroboros is a local-first runtime for AI coding agents that records their actions and applies user-defined policies to constrain behavior. In versions prior to 0.39.0, if a user clones a malicious repository and runs Ouroboros commands within that directory, it can lead to arbitrary code execution and potential system takeover. The vulnerability stems from Ouroboros loading the .env file from the current working directory. Execution-affecting environment variables such as OUROBOROS_CLI_PATH, OPENCODE_CLI_PATH, and other backend selectors are accepted directly from this local .env. An attacker can include a malicious script in the repository and point the CLI path variable to it (e.g., OUROBOROS_CLI_PATH=./malicious_script.sh). When the user executes a command like ouroboros init or any command that instantiates the adapter, the malicious script is executed instead of the intended CLI. This issue has been fixed in version 0.39.0.
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.