CWE-22: Path Traversal vulnerabilities

CVE-2026-44615 is a path traversal vulnerability in Apache Zeppelin affecting versions 0.9.0 through 0.12.0. When FileSystemNotebookRepo is configured, an authenticated user with permission to rename notes or perform folder operations can supply path traversal sequences. This allows manipulation of filesystem paths outside the intended notebook directory, potentially moving, writing, or deleting files or directories beyond the notebook root. The issue is fixed in Apache Zeppelin version 0.12.1.

CVE-2026-62391 is a path traversal vulnerability in Apache Kyuubi affecting versions from 1.6.0 up to but not including 1.12.0. The issue arises because the security fix for a previous vulnerability (CVE-2025-66518) is incomplete, allowing clients with access to the Kyuubi Server via frontend protocols to bypass server-side directory allowlist restrictions using unprefixed Spark config aliases. This vulnerability has a high severity score of 8.1 and impacts confidentiality and integrity without affecting availability.

CVE-2026-56673 is a path traversal vulnerability in Comfy-Org's ComfyUI prior to version 0.28.0. The issue arises because certain functions join user-controlled filenames to a base directory without verifying containment, allowing unauthenticated attackers to read arbitrary files. This affects multiple nodes including LoadImage and related nodes. The vulnerability is fixed in version 0.28.0.

CVE-2026-56671 is a path traversal vulnerability in Comfy-Org's ComfyUI prior to version 0.28.0. The vulnerability exists in the get_model_preview function, which improperly joins an unrestricted filename route to a model directory without containment checks. This allows unauthenticated remote attackers to read image-decodable files outside the intended directory by using traversal sequences or absolute paths. The disclosed files are processed through Pillow and re-encoded as WEBP, limiting disclosure to image-compatible files and enabling file existence enumeration. The issue is fixed in version 0.28.0.

CVE-2026-66755 is a path traversal vulnerability in the ISA-Tab parser component of Apache Tika versions from 1.8 through 3.3.1 and 4.0.0-alpha-1. This flaw allows an attacker who can place files in a directory parsed by Tika to read arbitrary files accessible to the Tika process by using a crafted "Study Assay File Name" value that traverses outside the intended dataset directory. The issue is fixed in Apache Tika versions 3.3.2 and 4.0.0-beta-1.

IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences ( /.. /) to view arbitrary files on the system.

CVE-2026-62663 is a path traversal vulnerability in the masci banks product prior to version 2.4.4. The vulnerability arises because banks accepts untrusted user input as file paths without sanitization or directory restrictions, allowing attackers to read arbitrary files accessible to the Python process. This can lead to exposure of sensitive files such as .env, SSH keys, cloud credentials, and system files like /etc/passwd and /etc/shadow. The issue has been fixed in version 2.4.4.

Apache Kyuubi versions 1.7.0 through 1.11.1 contain a path traversal vulnerability in the REST batch multipart upload handling. The server uses the client-supplied multipart filename when creating temporary uploaded resources, allowing a remote attacker to write files outside the intended directory if they can access the upload endpoint. This issue is fixed in version 1.12.0.

Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability. The specific flaw exists within the uploadJar method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28603.

Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes authorizes the request under the permitted prefix while the downstream workload or a fronting proxy normalizes the path and serves the restricted endpoint. An attacker with network access and no special RBAC can potentially reach HTTP endpoints the policy was intended to restrict.

CVE-2026-15435 is a critical path traversal vulnerability in IBM App Connect Enterprise versions 13.0.1.0 through 13.0.7.2 and 12.0.1.0 through 12.0.12.27. It allows a remote attacker to send specially crafted URL requests containing directory traversal sequences (/../) to write arbitrary files on the affected system. This vulnerability can lead to full compromise of confidentiality, integrity, and availability of the system.

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary files due to a path traversal vulnerability.

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause the affected component to access an unintended filesystem path or log database file. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside the intended wallpaper directory, subject to user permissions and filesystem restrictions. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an uploaded certificate file outside the intended VPN certificate directory, subject to process privileges and filesystem permissions. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing modules use caller-controlled output_dir instead of validate_path_with_env_config and its FLYTO_SANDBOX_DIR confinement, allowing attacker-controlled response bytes to be written to arbitrary filesystem paths the process can access. This issue is fixed in version 2.26.6.

CVE-2026-13723 is a path traversal vulnerability in Develar's app-builder affecting versions up to 4.2.0. It arises from improper handling of Unicode normalization in the zipx.Unzip extraction routine on macOS APFS. An attacker can craft a ZIP archive with a symlink named 'ss' and a file named 'ß' that exploits APFS's Unicode equivalence to overwrite arbitrary files by following the symlink during extraction.

Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download() implementation in penelope.py used tar.extractall(local_download_folder) on tar archives returned by remote sessions without validating member paths, allowing a malicious or compromised session to write files outside the intended download directory and potentially overwrite ~/.penelope/peneloperc. This issue is fixed in version 0.20.0.