CVE-2026-47253
Received Received - Intake

Path Traversal in Anyquery SQL Engine

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: GitHub, Inc.

Description
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, the clear_plugin_cache(plugin) SQL scalar function in namespace/other_functions.go passes the caller-controlled plugin parameter through path.Join to os.RemoveAll without rejecting traversal segments. A low-privileged bearer-token holder can invoke the function through the /v1/query HTTP endpoint, causing path.Join to resolve .. segments outside $XDG_CACHE_HOME/anyquery/plugins/ and os.RemoveAll to recursively delete any reachable directory writable by the Anyquery server process. This causes permanent data loss and denial of service without disclosing file contents. This issue is fixed in version 0.4.5.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-15
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-47253

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
anyquery anyquery 0.4.5
julien040 anyquery to 0.4.5 (exc)
julien040 anyquery 0.4.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-47253 is a path traversal vulnerability in Anyquery versions prior to 0.4.5. The clear_plugin_cache function uses a user-controlled plugin parameter in path.Join before passing it to os.RemoveAll to delete directories. This allows low-privileged attackers to traverse outside the intended cache directory and delete any writable directory accessible to the server process, causing permanent data loss and denial of service without exposing file contents.

Detection Guidance

Check if your Anyquery server is running a version prior to 0.4.5. Inspect HTTP requests to the /v1/query endpoint for path traversal patterns like ../ in the plugin parameter. Monitor for unexpected directory deletions in server logs or filesystem changes.

Impact Analysis

If you run Anyquery server versions before 0.4.5, an attacker with low privileges could exploit this to delete critical directories on your system, including system directories or application data. This results in permanent data loss and service disruption. The vulnerability is triggered via the /v1/query HTTP endpoint by providing a malicious plugin parameter.

Mitigation Strategies

Immediately upgrade Anyquery to version 0.4.5 or later to apply the sandboxing fix. If upgrading is not possible, disable the /v1/query endpoint or restrict access to trusted users only. Enable sandboxing with default restrictions if using CLI commands.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-47253. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart