The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restrict which PHP functions can be used as a custom field-validation callback, relying on a blocklist that omits a file-deletion function, allowing users able to manage forms to cause arbitrary files on the server to be deleted. The deletion itself is carried out when the form is submitted, which requires no authentication.
CVE-2026-50158 is a high-severity vulnerability in the eat-pray-ai yutu toolkit prior to version 0.10.9. It involves external control of a file name or path in the caption-download MCP tool, allowing an attacker with access to invoke caption-download to write files outside the intended confinement boundary. This can lead to overwriting critical files and potentially persistent code execution or denial of service. The vulnerability requires local HTTP client access when the MCP server runs without authentication and valid service credentials for live caption retrieval. The issue is fixed in version 0.10.9.
CVE-2026-55062 is a path traversal vulnerability in the uniget-org CLI tool prior to version 0.27.6. The vulnerability arises from the hooks edit command concatenating an unvalidated hook filename with the hooks directory path, allowing directory traversal outside the intended directory. This can lead to unauthorized file access or modification with the privileges of the uniget process. The issue is fixed in version 0.27.6.
mport is the MidnightBSD Package Manager. Prior to 2.7.8, package installation lacked a preflight check for incoming non-directory assets that already existed on disk. The affected logic across libmport/check_preconditions.c, libmport/install_primative.c, and libmport/mport_private.h did not apply MPORT_PRECHECK_FILE_CONFLICTS, so a crafted or conflicting package could overwrite a file owned by another package or unmanaged by mport. The check is bypassed only when the operator explicitly enables mport->force. Privileged installation without that override could compromise local filesystem integrity and package database consistency. This issue is fixed in version 2.7.8.
mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/fetch.c did not consistently reject empty, dot, dot-dot, or slash-containing bundle filenames before composing package download and write paths. Malicious package index data could place an unsafe value in indexEntry->bundlefile, and the missing is_valid_bundle_filename() checks allowed downloaded package data to be written outside the intended cache location or to an unsafe destination name. This issue is fixed in version 2.7.8.
### Impact
An OpenAPI or AsyncAPI description could make the `split` command write
files outside the chosen output directory, on the machine of anyone who runs
`split` against it. The write is constrained rather than a free file-write
primitive: component data is emitted only as YAML/JSON, and code-sample files are
named after the HTTP method, so an attacker can place or overwrite files at an
unintended path but has limited control over their name and contents.
### Patches
Fixed in `@redocly/cli` v2.33.2.
### Workarounds
Do not run the `split` command on API descriptions from untrusted or unreviewed sources.
To detect an exploit attempt, inspect the description's component names and
`x-codeSamples` `lang` values for a literal `../` — neither legitimately contains
path segments.
CVE-2026-73171 is a high-severity vulnerability in Advantech EKI-1242IEIMS firmware version 1.06.01 and earlier. It involves external control of file name or path (CWE-73) in the backup-restore workflow, allowing a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a crafted backup archive via the web management interface.
CVE-2026-76553 is a vulnerability in the WP Import Export Lite WordPress plugin versions before 3.9.33. It allows users with delegated plugin capabilities to delete arbitrary directories and all files within them, including those outside the web root, due to improper validation of user-supplied paths before recursive deletion.
The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file path parameter without adequate validation, allowing a crafted path to read arbitrary image files from the host filesystem outside the intended scope. Fixed in 1.6.2. The fix limits access by file extension only, not by directory - arbitrary-location reads of files with an allowed image extension remain possible by design (accepted residual risk).
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticated SQL from its MySQL-compatible server port to SQLite without restricting ATTACH DATABASE filesystem targets. A remote attacker can select any path writable by the Anyquery server process, cause SQLite to create a database file there, and place attacker-controlled table content in that file. This permits arbitrary file creation or overwrite, causing filesystem integrity loss and denial of service; remote code execution is possible only when another service interprets the written file or the process has a suitably privileged writable target. This issue is fixed in version 0.4.5.
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtual table modules such as csv_reader and log_reader through its MySQL-compatible server port without authentication, authorization, or directory restrictions. A remote attacker can use SQLite CREATE VIRTUAL TABLE statements to provide a local path to these modules, which use hashicorp/go-getter under the Anyquery server process and return the selected file contents as queryable table rows. The disclosure is limited only by the filesystem permissions of the server process and can expose system configuration, credentials, and private keys. This issue is fixed in version 0.4.5.
IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the confluence_upload_attachment and confluence_upload_attachments tools pass a client-controlled file_path through src/mcp_atlassian/confluence/attachments.py upload_attachment, and the jira_update_issue attachments parameter reaches src/mcp_atlassian/jira/attachments.py upload_attachment, without confining either path to an approved server workspace. In a remote HTTP, SSE, or multi-user deployment, absolute or traversing paths are resolved on the MCP server and uploaded to Atlassian, allowing a client with write-tool access to disclose server files, environment-held Atlassian credentials, or another tenant's data. A local single-user stdio deployment does not cross this trust boundary because the server runs in the caller's environment. This issue is fixed in version 0.22.0.
The WebTotem Backups WordPress plugin before 1.1.0 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a site takeover.
The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before deleting a file, and does not check the capability of the user making the request, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a site takeover.
A path traversal vulnerability exists in rattler_cache prior to version 0.9.0 and py-rattler prior to version 0.24.0. This flaw allows a malicious or untrusted conda channel to craft package metadata with path traversal components in the build string, causing package contents to be written outside the intended cache directory. Curated channels that validate metadata are not expected to allow such malformed build strings. Users should upgrade to fixed versions to mitigate this issue.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker.
A path traversal vulnerability (CWE-22) exists in the NTP configuration module of OPNsense core prior to version 26.1.9 and BE/opnsense/core prior to 26.4_20. This flaw allows an attacker with access to the NTP configuration and high privileges to overwrite arbitrary files on the system as root by manipulating GPS or PPS serial port parameters. The vulnerability is patched in versions 26.1.9 and 26.4_20 respectively.
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote from that configuration instead of the checked parameter. An authenticated workflow editor could therefore point Git at any local repository readable by the n8n process and receive its contents through packages/nodes-base/nodes/Git/GenericFunctions.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.
CVE-2026-66302 is a critical vulnerability in Microsoft Skype for Business Server 2015 CU13 involving external control of file name or path. This flaw allows an unauthorized attacker to execute code remotely over a network without any user interaction or privileges. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has released official patches that fix this issue in versions 6.0.9319.885, 7.0.2046.569, and 7.0.2046.879.