A patch bypass vulnerability that circumvents fixes for CVE-2025-49706 from the ToolShell attack chain. Path traversal due to improper pathname limitation in SharePoint Server enables unauthorized network spoofing attacks. While not directly exploited, this vulnerability was part of the chained exploitation alongside the critical RCE (CVE-2025-49704/CVE-2025-53770) to gain unauthorized access to on-premise SharePoint servers.