CVE-2026-44942: Cpp Unvalidated Dict Path Traversal

Parsing "path" parameters without verifying for directory traversal sequences (e.g., `../`) allows attackers to escape sandboxed or designated working directories. Always validate paths to prevent arbitrary file creation or modification.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0C++
greprules fetch cve-2026-44942-cpp-unvalidated-dict-path-traversal --engine opengrep

Description

Parsing "path" parameters without verifying for directory traversal sequences (e.g., `../`) allows attackers to escape sandboxed or designated working directories. Always validate paths to prevent arbitrary file creation or modification.