MCP vulnerabilities

1 known vulnerability in MCP from 03-lovepreetSingh. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  MCP: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-94044Sep 20, 202603-lovepreetSingh

  A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. Th