GCVE - cpe:2.3:a:hackplayers:evil-winrm:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hackplayers:evil-winrm:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-55201`	vulnerable	2026-07-29 01:00:28.389914	Evil-WinRM - Path Traversal in download_dir() Function MEDIUM (6.8) Evil-WinRM through 3.9, fixed in commit 6ecd570, contains a path traversal vulnerability in the download_dir() function that allows a rogue or compromised remote Windows server to write files outside the intended download directory by returning filenames with traversal sequences from Get-ChildItem command output that are passed unsanitized to File.join(). Attackers controlling the remote server can exploit this to overwrite sensitive client-side files such as SSH authorized_keys or shell configuration files, achieving persistent access or privilege escalation on the client machine. Published: 2026-06-17T19:08:47.264Z Updated: 2026-11-08T14:05:22.472Z Open on db.gcve.eu Reference links https://github.com/Hackplayers/evil-winrm/pull/81 https://github.com/Hackplayers/evil-winrm/commit/6ecd570a298562dc72ad73978307eb34182f5850 https://www.vulncheck.com/advisories/evil-winrm-path-traversal-in-download-dir-function	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.