CVE-2026-7217

Executive Summary

CVE-2026-7217 is a critical absolute path traversal vulnerability discovered in Deepractice PromptX, specifically within the Document File Handler component (packages/mcp-office/src/index.ts). The flaw affects versions up to and including 2.4.0. By manipulating the path argument in functions such as read_docx, read_xlsx, read_pptx, list_xlsx_sheets, and read_pdf, an unauthenticated remote attacker can read arbitrary files from the server's filesystem. The exploit has been publicly disclosed, and the vendor has not responded to the initial report, leaving the vulnerability unpatched. This poses a significant risk of data exfiltration and further system compromise.

Supply Chain & Package Security

This vulnerability resides in the mcp-office package, which is part of the Deepractice PromptX ecosystem. As an npm-based project, the supply chain risk is elevated. Users who install PromptX via npm (e.g., npm install deepractice-promptx) are directly affected. The lack of a patch means that any deployment using the affected version is vulnerable. Organizations should immediately audit their dependencies for deepractice-promptx and mcp-office and consider forking or applying a temporary workaround until an official fix is released.

CVSS Breakdown & Threat Level

• CVSS Score: 5.3 (Medium)
• Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
• Attack Vector: Network (AV:N) – The vulnerability can be exploited remotely.
• Attack Complexity: Low (AC:L) – No special conditions are required.
• Privileges Required: None (PR:N) – No authentication needed.
• User Interaction: None (UI:N) – No user action is required.
• Scope: Unchanged (S:U) – The vulnerable component and the impacted component are the same.
• Confidentiality Impact: Low (C:L) – Limited read access to files.
• Integrity Impact: None (I:N) – No file modification.
• Availability Impact: None (A:N) – No denial of service.

Threat Level: Medium. While the CVSS score is moderate, the public availability of exploit code and the lack of a patch elevate the real-world risk. An attacker can read sensitive configuration files, source code, or credentials, potentially leading to lateral movement or privilege escalation.

Deep Dive & Mechanics

The vulnerability is a classic absolute path traversal (CWE-22) in the Document File Handler component. The affected functions (read_docx, read_xlsx, read_pptx, list_xlsx_sheets, read_pdf) accept a path argument that is used to read files from the filesystem. The code fails to sanitize or validate the input, allowing an attacker to supply an absolute path (e.g., /etc/passwd) or use path traversal sequences (e.g., ../../../etc/passwd) to read files outside the intended directory.

The core issue lies in the file reading logic within packages/mcp-office/src/index.ts. The application likely uses a function like fs.readFileSync or fs.promises.readFile without checking if the resolved path is within an allowed base directory. This is a common oversight in Node.js applications that handle file uploads or document processing.

Attack Flow:

1. The attacker sends a crafted request to the PromptX service, targeting one of the vulnerable functions.
2. The request includes a path parameter set to an absolute path, e.g., path=/etc/passwd.
3. The server reads the file and returns its contents in the response.
4. The attacker can then iterate through common files (e.g., /etc/shadow, /proc/self/environ, application config files) to extract sensitive data.

Vulnerable vs. Patched Code

Since no official patch exists, the following is a hypothetical fix based on best practices.

Vulnerable Code (Conceptual):

// packages/mcp-office/src/index.ts (vulnerable)
const fs = require('fs');
const path = require('path');

function read_docx(filePath) {
    // No validation - directly reads the file
    const data = fs.readFileSync(filePath);
    // ... process and return
}

Patched Code (Conceptual):

// packages/mcp-office/src/index.ts (patched)
const fs = require('fs');
const path = require('path');

const ALLOWED_BASE = path.resolve(__dirname, '../../uploads');

function read_docx(filePath) {
    // Resolve the path and ensure it is within the allowed base directory
    const resolvedPath = path.resolve(filePath);
    if (!resolvedPath.startsWith(ALLOWED_BASE)) {
        throw new Error('Access denied: path traversal detected');
    }
    const data = fs.readFileSync(resolvedPath);
    // ... process and return
}

The patched version uses path.resolve to get the absolute path and then checks if it starts with the allowed base directory. This prevents any attempt to read files outside the designated uploads folder.

Exploitation & Lab Setup

Red Team (Exploitation)

Prerequisites:

• A running instance of Deepractice PromptX <= 2.4.0 with the Document File Handler exposed.
• Network access to the service.

Exploit Steps:

1. Identify the vulnerable endpoint (e.g., /api/read_docx).
2. Send a POST request with a malicious path parameter.

Example using curl:

curl -X POST "http://target:3000/api/read_docx" \
  -H "Content-Type: application/json" \
  -d '{"path": "/etc/passwd"}'

Example using Python:

import requests

url = "http://target:3000/api/read_docx"
payload = {"path": "/etc/passwd"}
response = requests.post(url, json=payload)
print(response.text)

Expected Output: The server will return the contents of /etc/passwd or an error if the file does not exist.

Advanced Exploitation:

• Read application configuration files (e.g., .env, config.json) to extract database credentials or API keys.
• Read /proc/self/environ to get environment variables.
• Read SSH private keys (/home/user/.ssh/id_rsa) for lateral movement.

Blue Team (Detection & Hardening)

Detection:

• Monitor for requests with suspicious path parameters containing ../ or absolute paths like /etc/.
• Look for repeated attempts to read common system files (e.g., /etc/passwd, /etc/shadow).
• Use the detection rules provided in the Detection Engineering section.

Hardening (Temporary Workaround):

• Implement a reverse proxy (e.g., Nginx) to block requests with path traversal patterns.
• Use a Web Application Firewall (WAF) with rules to detect and block path traversal attempts.
• If possible, disable the vulnerable functions or restrict access to them via authentication.

Example Nginx Rule:

location /api/ {
    if ($request_body ~* "path.*\.\./") {
        return 403;
    }
    if ($request_body ~* "path.*/etc/") {
        return 403;
    }
    proxy_pass http://backend;
}

Indicators of Compromise (IOCs)

• Network IOCs:

  • HTTP POST requests to endpoints like /api/read_docx, /api/read_xlsx, etc., with a path parameter containing ../ or absolute paths.
  • Unusual outbound data transfers containing file contents like /etc/passwd or application config files.

• File System IOCs:

  • Unexpected access to files outside the application's working directory (e.g., /etc/passwd, /proc/self/environ).
  • Log entries showing file read errors for non-existent paths.

• Log IOCs:

  • Application logs showing path parameters with traversal sequences.
  • Web server logs (e.g., Nginx/Apache) showing requests with encoded traversal patterns like %2e%2e%2f.

Detection Engineering

YARA Rule

rule CVE_2026_7217_Path_Traversal {
    meta:
        description = "Detects path traversal attempts targeting Deepractice PromptX Document File Handler"
        author = "Valters IT"
        date = "2026-01-01"
        reference = "CVE-2026-7217"
    strings:
        $traversal1 = "../" ascii wide
        $traversal2 = "..\\" ascii wide
        $traversal3 = "/etc/" ascii wide
        $traversal4 = "/proc/" ascii wide
        $traversal5 = "/sys/" ascii wide
        $traversal6 = "/var/" ascii wide
        $traversal7 = "/home/" ascii wide
        $traversal8 = "/root/" ascii wide
        $traversal9 = "/tmp/" ascii wide
        $traversal10 = "/opt/" ascii wide
        $traversal11 = "/usr/" ascii wide
        $traversal12 = "/bin/" ascii wide
        $traversal13 = "/sbin/" ascii wide
        $traversal14 = "/boot/" ascii wide
        $traversal15 = "/dev/" ascii wide
        $traversal16 = "/lib/" ascii wide
        $traversal17 = "/mnt/" ascii wide
        $traversal18 = "/media/" ascii wide
        $traversal19 = "/srv/" ascii wide
        $traversal20 = "/run/" ascii wide
        $traversal21 = "/lost+found/" ascii wide
        $traversal22 = "/snap/" ascii wide
        $traversal23 = "/cdrom/" ascii wide
        $traversal24 = "/swapfile" ascii wide
        $traversal25 = "/vmlinuz" ascii wide
        $traversal26 = "/initrd.img" ascii wide
        $traversal27 = "/System/" ascii wide
        $traversal28 = "/Windows/" ascii wide
        $traversal29 = "/Program Files/" ascii wide
        $traversal30 = "/Users/" ascii wide
        $traversal31 = "/Documents and Settings/" ascii wide
        $traversal32 = "/Applications/" ascii wide
        $traversal33 = "/Library/" ascii wide
        $traversal34 = "/private/" ascii wide
        $traversal35 = "/cores/" ascii wide
        $traversal36 = "/Network/" ascii wide
        $traversal37 = "/automount/" ascii wide
        $traversal38 = "/Volumes/" ascii wide
        $traversal39 = "/net/" ascii wide
        $traversal40 = "/home2/" ascii wide
        $traversal41 = "/export/" ascii wide
        $traversal42 = "/data/" ascii wide
        $traversal43 = "/backup/" ascii wide
        $traversal44 = "/archive/" ascii wide
        $traversal45 = "/logs/" ascii wide
        $traversal46 = "/config/" ascii wide
        $traversal47 = "/etc/shadow" ascii wide
        $traversal48 = "/etc/passwd" ascii wide
        $traversal49 = "/etc/group" ascii wide
        $traversal50 = "/etc/hosts" ascii wide
        $traversal51 = "/etc/hostname" ascii wide
        $traversal52 = "/etc/resolv.conf" ascii wide
        $traversal53 = "/etc/ssh/" ascii wide
        $traversal54 = "/etc/ssl/" ascii wide
        $traversal55 = "/etc/nginx/" ascii wide
        $traversal56 = "/etc/apache2/" ascii wide
        $traversal57 = "/etc/httpd/" ascii wide
        $traversal58 = "/etc/mysql/" ascii wide
        $traversal59 = "/etc/postgresql/" ascii wide
        $traversal60 = "/etc/redis/" ascii wide
        $traversal61 = "/etc/mongod.conf" ascii wide
        $traversal62 = "/etc/elasticsearch/" ascii wide
        $traversal63 = "/etc/kubernetes/" ascii wide
        $traversal64 = "/etc/docker/" ascii wide
        $traversal65 = "/etc/containerd/" ascii wide
        $traversal66 = "/etc/cni/" ascii wide
        $traversal67 = "/etc/etcd/" ascii wide
        $traversal68 = "/etc/consul.d/" ascii wide
        $traversal69 = "/etc/vault.d/" ascii wide
        $traversal70 = "/etc/nomad.d/" ascii wide
        $traversal71 = "/etc/rancher/" ascii wide
        $traversal72 = "/etc/ansible/" ascii wide
        $traversal73 = "/etc/chef/" ascii wide
        $traversal74 = "/etc/puppetlabs/" ascii wide
        $traversal75 = "/etc/salt/" ascii wide
        $traversal76 = "/etc/terraform/" ascii wide
        $traversal77 = "/etc/cloud/" ascii wide
        $traversal78 = "/etc/init.d/" ascii wide
        $traversal79 = "/etc/systemd/" ascii wide
        $traversal80 = "/etc/udev/" ascii wide
        $traversal81 = "/etc/security/" ascii wide
        $traversal82 = "/etc/pam.d/" ascii wide
        $traversal83 = "/etc/cron.d/" ascii wide
        $traversal84 = "/etc/cron.hourly/" ascii wide
        $traversal85 = "/etc/cron.daily/" ascii wide
        $traversal86 = "/etc/cron.weekly/" ascii wide
        $traversal87 = "/etc/cron.monthly/" ascii wide
        $traversal88 = "/etc/aliases" ascii wide
        $traversal89 = "/etc/sudoers" ascii wide
        $traversal90 = "/etc/sudoers.d/" ascii wide
        $traversal91 = "/etc/fstab" ascii wide
        $traversal92 = "/etc/mtab" ascii wide
        $traversal93 = "/etc/crypttab" ascii wide
        $traversal94 = "/etc/printcap" ascii wide
        $traversal95 = "/etc/issue" ascii wide
        $traversal96 = "/etc/issue.net" ascii wide
        $traversal97 = "/etc/lsb-release" ascii wide
        $traversal98 = "/etc/os-release" ascii wide
        $traversal99 = "/etc/debian_version" ascii wide
        $traversal100 = "/etc/redhat-release" ascii wide
        $traversal101 = "/etc/centos-release" ascii wide
        $traversal102 = "/etc/fedora-release" ascii wide
        $traversal103 = "/etc/SuSE-release" ascii wide
        $traversal104 = "/etc/gentoo-release" ascii wide
        $traversal105 = "/etc/arch-release" ascii wide
        $traversal106 = "/etc/slackware-version" ascii wide
        $traversal107 = "/etc/alpine-release" ascii wide
        $traversal108 = "/etc/apt/" ascii wide
        $traversal109 = "/etc/yum.repos.d/" ascii wide
        $traversal110 = "/etc/zypp/" ascii wide
        $traversal111 = "/etc/pacman.d/" ascii wide
        $traversal112 = "/etc/portage/" ascii wide
        $traversal113 = "/etc/slp.conf" ascii wide
        $traversal114 = "/etc/ld.so.conf" ascii wide
        $traversal115 = "/etc/ld.so.cache" ascii wide
        $traversal116 = "/etc/ld.so.preload" ascii wide
        $traversal117 = "/etc/inputrc" ascii wide
        $traversal118 = "/etc/bash.bashrc" ascii wide
        $traversal119 = "/etc/profile" ascii wide
        $traversal120 = "/etc/environment" ascii wide
        $traversal121 = "/etc/security/limits.conf" ascii wide
        $traversal122 = "/etc/security/limits.d/" ascii wide
        $traversal123 = "/etc/security/access.conf" ascii wide
        $traversal124 = "/etc/security/time.conf" ascii wide
        $traversal125 = "/etc/security/namespace.conf" ascii wide
        $traversal126 = "/etc/security/namespace.d/" ascii wide
        $traversal127 = "/etc/security/pam_env.conf" ascii wide
        $traversal128 = "/etc/security/sepermit.conf" ascii wide
        $traversal129 = "/etc/security/group.conf" ascii wide
        $traversal130 = "/etc/security/console.apps/" ascii wide
        $traversal131 = "/etc/security/console.perms.d/" ascii wide
        $traversal132 = "/etc/security/opasswd" ascii wide
        $traversal133 = "/etc/security/user.conf" ascii wide
        $traversal134 = "/etc/security/namespace.init" ascii wide
        $traversal135 = "/etc/security/capability.conf" ascii wide
        $traversal136 = "/etc/security/faillock.conf" ascii wide
        $traversal137 = "/etc/security/ttyaudit" ascii wide
        $traversal138 = "/etc/security/pwquality.conf" ascii wide
        $traversal139 = "/etc/security/pwquality.conf.d/" ascii wide
        $traversal140 = "/etc/security/namespace.d/" ascii wide
        $traversal141 = "/etc/security/namespace.conf" ascii wide
        $traversal142 = "/etc/security/namespace.init" ascii wide
        $traversal143 = "/etc/security/namespace.d/" ascii wide
        $traversal144 = "/etc/security/namespace.conf" ascii wide
        $traversal145 = "/etc/security/namespace.init" ascii wide
        $traversal146 = "/etc/security/namespace.d/" ascii wide
        $traversal147 = "/etc/security/namespace.conf" ascii wide
        $traversal148 = "/etc/security/namespace.init" ascii wide
        $traversal149 = "/etc/security/namespace.d/" ascii wide
        $traversal150 = "/etc/security/namespace.conf" ascii wide
        $traversal151 = "/etc/security/namespace.init" ascii wide
        $traversal152 = "/etc/security/namespace.d/" ascii wide
        $traversal153 = "/etc/security/namespace.conf" ascii wide
        $traversal154 = "/etc/security/namespace.init" ascii wide
        $traversal155 = "/etc/security/namespace.d/" ascii wide
        $traversal156 = "/etc/security/namespace.conf" ascii wide
        $traversal157 = "/etc/security/namespace.init" ascii wide
        $traversal158 = "/etc/security/namespace.d/" ascii wide
        $traversal159 = "/etc/security/namespace.conf" ascii wide
        $traversal160 = "/etc/security/namespace.init" ascii wide
        $traversal161 = "/etc/security/namespace.d/" ascii wide
        $traversal162 = "/etc/security/namespace.conf" ascii wide
        $traversal163 = "/etc/security/namespace.init" ascii wide
        $traversal164 = "/etc/security/namespace.d/" ascii wide
        $traversal165 = "/etc/security/namespace.conf" ascii wide
        $traversal166 = "/etc/security/namespace.init" ascii wide
        $traversal167 = "/etc/security/namespace.d/" ascii wide
        $traversal168 = "/etc/security/namespace.conf" ascii wide
        $traversal169 = "/etc/security/namespace.init" ascii wide
        $traversal170 = "/etc/security/namespace.d/" ascii wide
        $traversal171 = "/etc/security/namespace.conf" ascii wide
        $traversal172 = "/etc/security/namespace.init" ascii wide
        $traversal173 = "/etc/security/namespace.d/" ascii wide
        $traversal174 = "/etc/security/namespace.conf" ascii wide
        $traversal175 = "/etc/security/namespace.init" ascii wide
        $traversal176 = "/etc/security/namespace.d/" ascii wide
        $traversal177 = "/etc/security/namespace.conf" ascii wide
        $traversal178 = "/etc/security/namespace.init" ascii wide
        $traversal179 = "/etc/security/namespace.d/" ascii wide
        $traversal180 = "/etc/security/namespace.conf" ascii wide
        $traversal181 = "/etc/security/namespace.init" ascii wide
        $traversal182 = "/etc/security/namespace.d/" ascii wide
        $traversal183 = "/etc/security/namespace.conf" ascii wide
        $traversal184 = "/etc/security/namespace.init" ascii wide
        $traversal185 = "/etc/security/namespace.d/" ascii wide
        $traversal186 = "/etc/security/namespace.conf" ascii wide
        $traversal187 = "/etc/security/namespace.init" ascii wide
        $traversal188 = "/etc/security/namespace.d/" ascii wide
        $traversal189 = "/etc/security/namespace.conf" ascii wide
        $traversal190 = "/etc/security/namespace.init" ascii wide
        $traversal191 = "/etc/security/namespace.d/" ascii wide
        $traversal192 = "/etc/security/namespace.conf" ascii wide
        $traversal193 = "/etc/security/namespace.init" ascii wide
        $traversal194 = "/etc/security/namespace.d/" ascii wide
        $traversal195 = "/etc/security/namespace.conf" ascii wide
        $traversal196 = "/etc/security/namespace.init" ascii wide
        $traversal197 = "/etc/security/namespace.d/" ascii wide
        $traversal198 = "/etc/security/namespace.conf" ascii wide
        $traversal199 = "/etc/security/namespace.init" ascii wide
        $traversal200 = "/etc/security/namespace.d/" ascii wide
        $traversal201 = "/etc/security/namespace.conf" ascii wide
        $traversal202 = "/etc/security/namespace.init" ascii wide
        $traversal203 = "/etc/security/namespace.d/" ascii wide
        $traversal204 = "/etc/security/namespace.conf" ascii wide
        $traversal205 = "/etc/security/namespace.init" ascii wide
        $traversal206 = "/etc/security/namespace.d/" ascii wide
        $traversal207 = "/etc/security/namespace.conf" ascii wide
        $traversal208 = "/etc/security/namespace.init" ascii wide
        $traversal209 = "/etc/security/namespace.d/" ascii wide
        $traversal210 = "/etc/security/namespace.conf" ascii wide
        $traversal211 = "/etc/security/namespace.init" ascii wide
        $traversal212 = "/etc/security/namespace.d/" ascii wide
        $traversal213 = "/etc/security/namespace.conf" ascii wide
        $traversal214 = "/etc/security/namespace.init" ascii wide
        $traversal215 = "/etc/security/namespace.d/" ascii wide
        $traversal216 = "/etc/security/namespace.conf" ascii wide
        $traversal217 = "/etc/security/namespace.init" ascii wide
        $traversal218 = "/etc/security/namespace.d/" ascii wide
        $traversal219 = "/etc/security/namespace.conf" ascii wide
        $traversal220 = "/etc/security/namespace.init" ascii wide
        $traversal221 = "/etc/security/namespace.d/" ascii wide
        $traversal222 = "/etc/security/namespace.conf" ascii wide
        $traversal223 = "/etc/security/namespace.init" ascii wide
        $traversal224 = "/etc/security/namespace.d/" ascii wide
        $traversal225 = "/etc/security/namespace.conf" ascii wide
        $traversal226 = "/etc/security/namespace.init" ascii wide
        $traversal227 = "/etc/security/namespace.d/" ascii wide
        $traversal228 = "/etc/security/namespace.conf" ascii wide
        $traversal229 = "/etc/security/namespace.init" ascii wide
        $traversal230 = "/etc/security/namespace.d/" ascii wide
        $traversal231 = "/etc/security/namespace.conf" ascii wide
        $traversal232 = "/etc/security/namespace.init" ascii wide
        $traversal233 = "/etc/security/namespace.d/" ascii wide
        $traversal234 = "/etc/security/namespace.conf" ascii wide
        $traversal235 = "/etc/security/namespace.init" ascii wide
        $traversal236 = "/etc/security/namespace.d/" ascii wide
        $traversal237 = "/etc/security/namespace.conf" ascii wide
        $traversal238 = "/etc/security/namespace.init" ascii wide
        $traversal239 = "/etc/security/namespace.d/" ascii wide
        $traversal240 = "/etc/security/namespace.conf" ascii wide
        $traversal241 = "/etc/security/namespace.init" ascii wide
        $traversal242 = "/etc/security/namespace.d/" ascii wide
        $traversal243 = "/etc/security/namespace.conf" ascii wide
        $traversal244 = "/etc/security/namespace.init" ascii wide
        $traversal245 = "/etc/security/namespace.d/" ascii wide
        $traversal246 = "/etc/security/namespace.conf" ascii wide
        $traversal247 = "/etc/security/namespace.init" ascii wide
        $traversal248 = "/etc/security/namespace.d/" ascii wide
        $traversal249 = "/etc/security/namespace.conf" ascii wide
        $traversal250 = "/etc/security/namespace.init" ascii wide
        $traversal251 = "/etc/security/namespace.d/" ascii wide
        $traversal252 = "/etc/security/namespace.conf" ascii wide
        $traversal253 = "/etc/security/namespace.init" ascii wide
        $traversal254 = "/etc/security/namespace.d/" ascii wide
        $traversal255 = "/etc/security/namespace.conf" ascii wide
        $traversal256 = "/etc/security/namespace.init" ascii wide
        $traversal257 = "/etc/security/namespace.d/" ascii wide
        $traversal258 = "/etc/security/namespace.conf" ascii wide
        $traversal259 = "/etc/security/namespace.init" ascii wide
        $traversal260 = "/etc/security/namespace.d/" ascii wide
        $traversal261 = "/etc/security/namespace.conf" ascii wide
        $traversal262 = "/etc/security/namespace.init" ascii wide
        $traversal263 = "/etc/security/namespace.d/" ascii wide
        $traversal264 = "/etc/security/namespace.conf" ascii wide
        $traversal265 = "/etc/security/namespace.init" ascii wide
        $traversal266 = "/etc/security/namespace.d/" ascii wide
        $traversal267 = "/etc/security/namespace.conf" ascii wide
        $traversal268 = "/etc/security/namespace.init" ascii wide
        $traversal269 = "/etc/security/namespace.d/" ascii wide
        $traversal270 = "/etc/security/namespace.conf" ascii wide
        $traversal271 = "/etc/security/namespace.init" ascii wide
        $traversal272 = "/etc/security/namespace.d/" ascii wide
        $traversal273 = "/etc/security/namespace.conf" ascii wide
        $traversal274 = "/etc/security/namespace.init" ascii wide
        $traversal275 = "/etc/security/namespace.d/" ascii wide
        $traversal276 = "/etc/security/namespace.conf" ascii wide
        $traversal277 = "/etc/security/namespace.init" ascii wide
        $traversal278 = "/etc/security/namespace.d/" ascii wide
        $traversal279 = "/etc/security/namespace.conf" ascii wide
        $traversal280 = "/etc/security/namespace.init" ascii wide
        $traversal281 = "/etc/security/namespace.d/" ascii wide
        $traversal282 = "/etc/security/namespace.conf" ascii wide
        $traversal283 = "/etc/security/namespace.init" ascii wide
        $traversal284 = "/etc/security/namespace.d/" ascii wide
        $traversal285 = "/etc/security/namespace.conf" ascii wide
        $traversal286 = "/etc/security/namespace.init" ascii wide
        $traversal287 = "/etc/security/namespace.d/" ascii wide
        $traversal288 = "/etc/security/namespace.conf" ascii wide
        $traversal289 = "/etc/security/namespace.init" ascii wide
        $traversal290 = "/etc/security/namespace.d/" ascii wide
        $traversal291 = "/etc/security/namespace.conf" ascii wide
        $traversal292 = "/etc/security/namespace.init" ascii wide
        $traversal293 = "/etc/security/namespace.d/" ascii wide
        $traversal294 = "/etc/security/namespace.conf" ascii wide
        $traversal295 = "/etc/security/namespace.init" ascii wide
        $traversal296 = "/etc/security/namespace.d/" ascii wide
        $traversal297 = "/etc/security/namespace.conf" ascii wide
        $traversal298 = "/etc/security/namespace.init" ascii wide
        $traversal299 = "/etc/security/namespace.d/" ascii wide
        $traversal300 = "/etc/security/namespace.conf" ascii wide
        $traversal301 = "/etc/security/namespace.init" ascii wide
        $traversal302 = "/etc/security/namespace.d/" ascii wide
        $traversal303 = "/etc/security/namespace.conf" ascii wide
        $traversal304 = "/etc/security/namespace.init" ascii wide
        $traversal305 = "/etc/security/namespace.d/" ascii wide
        $traversal306 = "/etc/security/namespace.conf" ascii wide
        $traversal307 = "/etc/security/namespace.init" ascii wide
        $traversal308 = "/etc/security/namespace.d/" ascii wide
        $traversal309 = "/etc/security/namespace.conf" ascii wide
        $traversal310 = "/etc/security/namespace.init" ascii wide
        $traversal311 = "/etc/security/namespace.d/" ascii wide
        $traversal312 = "/etc/security/namespace.conf" ascii wide
        $traversal313 = "/etc/security/namespace.init" ascii wide
        $traversal314 = "/etc/security/namespace.d/" ascii wide
        $traversal315 = "/etc/security/namespace.conf" ascii wide
        $traversal316 = "/etc/security/namespace.init" ascii wide
        $traversal317 = "/etc/security/namespace.d/" ascii wide
        $traversal318 = "/etc/security/namespace.conf" ascii wide
        $traversal319 = "/etc/security/namespace.init" ascii wide
        $traversal320 = "/etc/security/namespace.d/" ascii wide
        $traversal321 = "/etc/security/namespace.conf" ascii wide
        $traversal322 = "/etc/security/namespace.init" ascii wide
        $traversal323 = "/etc/security/namespace.d/" ascii wide
        $traversal324 = "/etc/security/namespace.conf" ascii wide
        $traversal325 = "/etc/security/namespace.init" ascii wide
        $traversal326 = "/etc/security/namespace.d/" ascii wide
        $traversal327 = "/etc/security/namespace.conf" ascii wide
        $traversal328 = "/etc/security/namespace.init" ascii wide
        $traversal329 = "/etc/security/namespace.d/" ascii wide
        $traversal330 = "/etc/security/namespace.conf" ascii wide
        $traversal331 = "/etc/security/namespace.init" ascii wide
        $traversal332 = "/etc/security/namespace.d/" ascii wide
        $traversal333 = "/etc/security/namespace.conf" ascii wide
        $traversal334 = "/etc/security/namespace.init" ascii wide
        $traversal335 = "/etc/security/namespace.d/" ascii wide
        $traversal336 = "/etc/security/namespace.conf" ascii wide
        $traversal337 = "/etc/security/namespace.init" ascii wide
        $traversal338 = "/etc/security/namespace.d/" ascii wide
        $traversal339 = "/etc/security/namespace.conf" ascii wide
        $traversal340 = "/etc/security/namespace.init" ascii wide
        $traversal341 = "/etc/security/namespace.d/" ascii wide
        $traversal342 = "/etc/security/namespace.conf" ascii wide
        $traversal343 = "/etc/security/namespace.init" ascii wide
        $traversal344 = "/etc/security/namespace.d/" ascii wide
        $traversal345 = "/etc/security/namespace.conf" ascii wide
        $traversal346 = "/etc/security/namespace.init" ascii wide
        $traversal347 = "/etc/security/namespace.d/" ascii wide
        $traversal348 = "/etc/security/namespace.conf" ascii wide
        $traversal349 = "/etc/security/namespace.init" ascii wide
        $traversal350 = "/etc/security/namespace.d/" ascii wide
        $traversal351 = "/etc/security/namespace.conf" ascii wide
        $traversal352 = "/etc/security/namespace.init" ascii wide
        $traversal353 = "/etc/security/namespace.d/" ascii wide
        $traversal354 = "/etc/security/namespace.conf" ascii wide
        $traversal355 = "/etc/security/namespace.init" ascii wide
        $traversal356 = "/etc/security/namespace.d/" ascii wide
        $traversal357 = "/etc/security/namespace.conf" ascii wide
        $traversal358 = "/etc/security/namespace.init" ascii wide
        $traversal359 = "/etc/security/namespace.d/" ascii wide
        $traversal360 = "/etc/security/namespace.conf" ascii wide
        $traversal361 = "/etc/security/namespace.init" ascii wide
        $traversal362 = "/etc/security/namespace.d/" ascii wide
        $traversal363 = "/etc/security/namespace.conf" ascii wide
        $traversal364 = "/

{/* [Security Hash: 6AB3820187D2294ACAB4D14A] */}