CWE-73
External Control of File Name or Path
Description
The product allows user input to control or influence paths or file names that are used in filesystem operations.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-13 · CAPEC-267 · CAPEC-64 · CAPEC-72 · CAPEC-76 · CAPEC-78 · CAPEC-79 · CAPEC-80
CVEs mapped to this weakness (561)
page 8 of 29| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-32204 | Hig | 0.51 | 7.8 | 0.00 | May 12, 2026 | External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-5054 | Hig | 0.51 | 7.8 | 0.00 | Apr 11, 2026 | NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target… | ||
| CVE-2026-24287 | Hig | 0.51 | 7.8 | 0.00 | Mar 10, 2026 | External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-62842 | Hig | 0.51 | 7.8 | 0.00 | Jan 2, 2026 | An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the… | ||
| CVE-2025-59516 | Hig | 0.51 | 7.8 | 0.02 | Dec 9, 2025 | Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-59511 | Hig | 0.51 | 7.8 | 0.00 | Nov 11, 2025 | External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2020-36868 | Hig | 0.51 | 7.8 | 0.00 | Oct 30, 2025 | Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The script performed profile retrieval and initialization routines using insecure file/command handling and insufficient validation of attacker-controlled inputs,… | ||
| CVE-2025-55316 | Hig | 0.51 | 7.8 | 0.00 | Sep 9, 2025 | External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-6463 | Hig | 0.51 | 8.8 | 0.12 | Jul 2, 2025 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'entry_delete_upload_files' function in all versions up to, and including, 1.44.2. This makes… | ||
| CVE-2024-4230 | Hig | 0.51 | 7.8 | 0.00 | Dec 19, 2024 | External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code, resulting in… | ||
| CVE-2024-41183 | Hig | 0.51 | 7.8 | 0.01 | Oct 22, 2024 | Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privileges. | ||
| CVE-2024-20366 | Hig | 0.51 | 7.8 | 0.00 | May 15, 2024 | A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orchestrator (NSO) could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability exists… | ||
| CVE-2023-5247 | Hig | 0.51 | 7.8 | 0.00 | Nov 30, 2023 | Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which… | ||
| CVE-2023-21566 | Hig | 0.51 | 7.8 | 0.00 | Feb 14, 2023 | Visual Studio Elevation of Privilege Vulnerability | ||
| CVE-2023-21800 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2020-6105 | Hig | 0.51 | 7.8 | 0.02 | Oct 15, 2020 | An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this… | ||
| CVE-2020-1984 | Hig | 0.51 | 7.8 | 0.00 | Apr 8, 2020 | Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. This issue affects… | ||
| CVE-2026-18127 | Hig | 0.50 | 7.7 | 0.00 | Aug 11, 2026 | External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage. | ||
| CVE-2026-15307 | Hig | 0.50 | 8.8 | 0.01 | Aug 4, 2026 | An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the `django.contrib.gis.gdal.GDALRaster` constructor. Any value used in a spatial lookup against a… | ||
| CVE-2026-66310 | Hig | 0.50 | 7.7 | 0.00 | Aug 4, 2026 | External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally. |
- risk 0.51cvss 7.8epss 0.00
External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target…
- risk 0.51cvss 7.8epss 0.00
External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the…
- risk 0.51cvss 7.8epss 0.02
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The script performed profile retrieval and initialization routines using insecure file/command handling and insufficient validation of attacker-controlled inputs,…
- risk 0.51cvss 7.8epss 0.00
External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 8.8epss 0.12
The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'entry_delete_upload_files' function in all versions up to, and including, 1.44.2. This makes…
- risk 0.51cvss 7.8epss 0.00
External Control of File Name or Path vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers versions 1.00 and later allows a malicious local attacker to execute an arbitrary malicious code, resulting in…
- risk 0.51cvss 7.8epss 0.01
Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that can lead to elevation of privileges.
- risk 0.51cvss 7.8epss 0.00
A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orchestrator (NSO) could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability exists…
- risk 0.51cvss 7.8epss 0.00
Malicious Code Execution Vulnerability due to External Control of File Name or Path in multiple Mitsubishi Electric FA Engineering Software Products allows a malicious attacker to execute a malicious code by having legitimate users open a specially crafted project file, which…
- risk 0.51cvss 7.8epss 0.00
Visual Studio Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Installer Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
An exploitable code execution vulnerability exists in the multiple devices functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause Information overwrite resulting in a code execution. An attacker can provide a malicious file to trigger this…
- risk 0.51cvss 7.8epss 0.00
Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk (C:\) to gain system privileges if the path does not already exist or is writable. This issue affects…
- risk 0.50cvss 7.7epss 0.00
External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage.
- risk 0.50cvss 8.8epss 0.01
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side value as a raster by passing it to the `django.contrib.gis.gdal.GDALRaster` constructor. Any value used in a spatial lookup against a…
- risk 0.50cvss 7.7epss 0.00
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.