CVE-2024-30073
Windows Security Zone Mapping Security Feature Bypass Vulnerability
CVSS
7.8
High
EPSS
0.9%
p56
KEV
—
Exploit Today
17
0-100
Published: Sep 10, 2024 · Last modified: Aug 10, 2026 · CWE-41
0.9%EPSS · 30 days0.9%
2026-07-172026-08-13
Windows Security Zone Mapping Security Feature Bypass Vulnerability
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-728356.8 MED—
———filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no rule but resolve to the same filesystem object, gaining unauthorized access to denied files within their scope.7hCVE-2026-660645.3 MED23.3%
——7goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.15dCVE-2026-344515.4 MED27.8%
——8Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications. From version 0.79.0 to before version 0.81.0, the local filesystem memory tool in the Anthropic TypeScript SDK validated model-supplied paths using a string prefix check that did not append a trailing path separator. A model steered by prompt injection could supply a crafted path that resolved to a sibling directory sharing the memory root's name as a prefix, allowing reads and writes outside the sandboxed memory directory. This issue has been patched in version 0.81.0.21d