CWE-427 Uncontrolled Search Path Element

Metalama allows local code execution through DLL planting in shared temporary directories

PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

OpenClaw: Fake package roots could influence memory-core artifact loading

Docker: `PUT /containers/{id}/archive` executes container binary on the host

OpenClaw: Workspace dotenv files cannot override connector endpoint hosts

OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config

Duplicate Advisory: OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution

OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides

openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows

OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides)

OpenClaw's hook transform module path allows traversal and arbitrary JavaScript module loading

OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway

nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

PsySH has Local Privilege Escalation via CWD .psysh.php auto-load

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Duplicate Advisory: Keycloak allows access to admin path through flaw

Keycloak unable to restrict access to the admin console

TkEasyGUI Affected by Uncontrolled Search Path Element Issue

OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal

Safearchive Path Traversal vulnerability