ConceptPath Traversal
Path Traversal
An attack technique that constructs relative path sequences such as ../ to make a program access files outside the intended directory. It is often used to steal environment variables and credentials.
Timeline (last 90 days)
Oct 15
Parameters themselves are part of the permission surface: adding a path parameter to a file-reading tool is equivalent to expanding permission from a certain directory to arbitrary paths (path traversal risk); adding cc or bcc to send-email is equivalent to expanding the outbound scope. Therefore scope review should be conducted continuously as tool schemas change.
Unverified50%