Common Weakness Enumeration
CWE-428 Unquoted Search Path or Element
Description
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-428 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-jfqx-fxh3-c62j | CVE-2026-34768 | LOW |
Electron: Unquoted executable path in app.setLoginItemSettings on Windows |
2026-04-06 | |
| GHSA-5gj7-jf77-q2q2 | CVE-2026-32009 | HIGH |
OpenClaw: safeBins static default trusted dirs allow writable-dir binary hijack (`jq`) |
2026-03-30 | |
| GHSA-m5gv-m5f9-wgv4 | CVE-2024-8996 | MODERATE |
Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability |
2024-10-09 | |
| GHSA-chqx-36rm-rf8h | CVE-2024-8975 | MODERATE |
Grafana Alloy on Windows has Unquoted Search Path or Element vulnerability |
2024-10-09 |