CWE-426 Untrusted Search Path
Description
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-426 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-p75x-jh7p-ppcx | CVE-2026-106505 | HIGH |
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend |
2026-10-07 | |
| GHSA-v8pv-4842-x354 | CVE-2026-81192 | HIGH |
OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS |
2026-09-16 | |
| GHSA-6hwm-xvph-95vm | CVE-2026-78680 | HIGH |
NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary |
2026-09-01 | |
| GHSA-54xp-3ww7-6wjg | - | HIGH |
Duplicate Advisory: Uncontrolled search path when invoking the Graphviz 'dot' binary (CWE-426/CWE-427) |
2026-09-01 | |
| GHSA-hxmv-c4g6-5fqc | CVE-2026-55522 | HIGH |
PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code |
2026-08-25 | |
| GHSA-fvvm-949w-qj4w | CVE-2026-45792 | MODERATE | - |
RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM |
2026-07-20 |
| GHSA-mhww-p97m-3368 | CVE-2026-11400 | HIGH |
AWS-JDBC Wrapper: Privilege Escalation in Aurora PostgreSQL instance |
2026-07-17 | |
| GHSA-8wg3-5mcm-fjq8 | CVE-2026-53819 | HIGH |
OpenClaw: Workspace .env could override Homebrew executable selection for skill install flows |
2026-07-02 | |
| GHSA-rx78-29qr-5hq8 | CVE-2026-53865 | HIGH |
OpenClaw: Workspace-derived service PATH could influence trash command selection |
2026-06-18 | |
| GHSA-2w22-3f6x-3hf4 | - | HIGH |
Duplicate Advisory: Workspace-derived service PATH could influence trash command selection |
2026-06-18 | |
| GHSA-wc84-j36w-pw4x | CVE-2026-53858 | HIGH |
OpenClaw: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots |
2026-06-18 | |
| GHSA-4qgr-57jq-93vh | - | HIGH |
Duplicate Advisory: Workspace .env STATE_DIRECTORY could influence bundled runtime dependency roots |
2026-06-18 | |
| GHSA-24vr-rprv-67rf | CVE-2026-53846 | HIGH |
OpenClaw: Workspace .env npm_execpath could influence bundled runtime dependency install |
2026-06-18 | |
| GHSA-qp5j-jr73-m2pw | - | HIGH |
Duplicate Advisory: Workspace .env npm_execpath could influence bundled runtime dependency install |
2026-06-18 | |
| GHSA-fq9j-vw4w-fr6v | CVE-2026-53842 | HIGH |
OpenClaw: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution |
2026-06-18 | |
| GHSA-9fr2-p65v-gqxq | - | HIGH |
Duplicate Advisory: Workspace .env CLOUDSDK_PYTHON could influence Gmail setup gcloud execution |
2026-06-18 | |
| GHSA-gv7w-rqvm-qjhr | - | HIGH |
Withdrawn Advisory: esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY |
2026-06-17 | |
| GHSA-r236-5pc3-3qcp | CVE-2026-11401 | HIGH |
golang/github.com/aws/aws-advanced-go-wrapper/auth-helpers
golang/github.com/aws/aws-advanced-go-wrapper/aws-secrets-manager
golang/github.com/aws/aws-advanced-go-wrapper/awssql/v2
golang/github.com/aws/aws-advanced-go-wrapper/custom-endpoint
golang/github.com/aws/aws-advanced-go-wrapper/federated-auth
golang/github.com/aws/aws-advanced-go-wrapper/iam
golang/github.com/aws/aws-advanced-go-wrapper/mysql-driver
golang/github.com/aws/aws-advanced-go-wrapper/okta
golang/github.com/aws/aws-advanced-go-wrapper/otlp
golang/github.com/aws/aws-advanced-go-wrapper/pgx-driver
golang/github.com/aws/aws-advanced-go-wrapper/xray
|
AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance |
2026-06-11 |
| GHSA-423p-g724-fr39 | CVE-2026-44477 | CRITICAL |
CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE |
2026-06-09 | |
| GHSA-c4m7-2gwp-vw76 | CVE-2026-47211 | HIGH |
ouroboros-ai Vulnerable to Remote Code Execution via Untrusted Project-Directory .env |
2026-05-29 | |
| GHSA-3qcw-2rhx-2726 | CVE-2026-45772 | LOW |
Turbo: Unexpected local code execution during Yarn Berry detection |
2026-05-19 | |
| GHSA-xwcr-wm99-g9jc | CVE-2026-45721 | CRITICAL |
Algernon: handler.lua discovery walks parent directories above the server root |
2026-05-19 | |
| GHSA-vfw7-6rhc-6xxg | CVE-2026-41384 | HIGH |
OpenClaw Has Incomplete Fix for CVE-2026-4039: CLI Backend Environment Variable Injection via Workspace Config |
2026-05-06 | |
| GHSA-mh5c-xrmh-m794 | CVE-2026-35368 | HIGH | - |
uutils coreutils has an Untrusted Search Path |
2026-04-30 |
| GHSA-5cwg-9f6j-9jvx | CVE-2026-35603 | MODERATE |
Claude Code: Insecure System-Wide Configuration Loading Enables Local Privilege Escalation on Windows |
2026-04-27 |