gopasspw

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

gopasspw records in CISA KEV

No gopasspw vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-82225 CVE-2026-118756 · GHSA-g69m-c6cf-wpcv

Path traversal in gopass lets attackers delete directories

LOW 29

gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to delete directories outside the password store via ../ entry names in Prune and IsDir.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00145 Published 2026-10-28 Fixed in 1.17.0 CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0