Threats Tagged 'cwe-41'

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

CVE-2026-93709 is a vulnerability in Dancer2 for Perl versions before 2.2.0 where the AutoPage handler improperly resolves path equivalence. This allows certain path variants (such as doubled slashes, dot segments, percent-encoded slashes, or case differences on case-insensitive filesystems) to bypass a guard check and serve a layout as a page. The vulnerability is off by default and only present when auto_page is enabled. The disclosed layout is already public, so the impact is limited to revealing one of the application's other layouts.

MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem-equivalent segment names. On case-insensitive macOS and Windows filesystems, case variants of .git, .obsidian, or node_modules pass both isAllowed() and isAllowedForListing() even though the operating system opens the restricted directory, and Windows trailing dots or spaces provide the same bypass. An attacker who influences a path selected by an AI agent can use the bypass in read, write, move, search, or listing operations to expose or modify sensitive repository and Obsidian metadata. Vault-root .. containment is not affected. This issue is fixed in version 0.11.4.

An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A path normalization discrepancy between the authentication filter and the servlet dispatcher allows a crafted request to bypass authentication and reach an endpoint that evaluates attacker-supplied script code without sandboxing, resulting in arbitrary code execution. Exploitation requires no authentication or user interaction.

Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network.

corydolphin/flask-cors version 4.0.1 contains an improper regex path matching vulnerability. The plugin prioritizes longer regex patterns over more specific ones when matching paths, which can lead to less restrictive CORS policies being applied to sensitive endpoints. This mismatch in regex pattern priority allows unauthorized cross-origin access to sensitive data or functionality, potentially exposing confidential information and increasing the risk of unauthorized actions by malicious actors.

MediumVulnerabilityGermanyFranceUnited Kingdom+2#cve#cve-2024-6839#cwe-41