CWE-426 (不可信的搜索路径) — Vulnerability Class 229

CWE-426 represents a critical input validation weakness where software relies on an externally-supplied search path to locate essential resources, such as executables or configuration files, rather than using absolute paths or trusted directories. Attackers typically exploit this vulnerability by manipulating the environment variable or system path to point to malicious code placed in a directory with higher precedence than the legitimate resource location. This allows them to execute arbitrary programs, access unauthorized data, or alter configurations unexpectedly, effectively achieving privilege escalation or remote code execution. To prevent this, developers must enforce strict path validation, utilize absolute paths for critical resources, and implement secure coding practices that restrict search directories to trusted, controlled locations. Additionally, applying the principle of least privilege ensures that even if an attacker manipulates the path, they cannot execute harmful code due to insufficient permissions.