Everything Patch Review has reported about Path Traversal: 3 stories, newest first. Part of our Vulnerabilities coverage.
Microsoft rates CVE-2026-102238 as critical because path traversal in older VS Code versions allows unauthorized remote code execution over a network.
Validating file names is insufficient because attackers manipulate directory structures to bypass simple string checks and access sensitive system data.
IBM Guardium versions 12.0 through 12.2 contain a critical vulnerability that lets attackers run arbitrary code remotely via path traversal.