notebooklm-mcp vulnerabilities
1 known vulnerability in notebooklm-mcp from Roomi-fields. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest first
- 7.1 High severity
notebooklm-mcp: Improper Limitation of a Pathname to a Restricted Directory
NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the `POST /batch-to-vault` endpoint, also