CVE-2026-45725: Path Traversal Via Url Path
Extracting components from untrusted URL paths without validation and appending them to local paths allows path traversal. This can result in arbitrary directories being created or file contents being overwritten via Arbitrary File Write.
Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0python
greprules fetch cve-2026-45725-path-traversal-via-url-path --engine opengrepDescription
Extracting components from untrusted URL paths without validation and appending them to local paths allows path traversal. This can result in arbitrary directories being created or file contents being overwritten via Arbitrary File Write.
Detection target
Not provided
Recommended fix
Not provided
False-positive notes
Not provided
Community feedback
Sign in to report false positives, mark this rule useful, or suggest metadata improvements.