CVE-2026-81847: Path Traversal in MAA-AI MaaMCP

This vulnerability in MAA-AI MaaMCP up to version 1.1.1.dev6+g2e4a41287 involves a path traversal flaw in the save_pipeline and load_pipeline functions within pipeline_tools.py. An attacker with limited privileges can remotely manipulate file paths to access files outside the intended directories. The vulnerability is tracked as CVE-2026-81847 and CWE-22 (Path Traversal). A patch exists identified by commit c93ef45cba75295eba26d9ff1ffb9202a91c6150, which should be applied to fix the issue. Although exploit code is publicly available, there are no reports of active exploitation in the wild. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required but user interaction needed, and low confidentiality, integrity, and availability impacts.

Successful exploitation allows an attacker to perform path traversal, potentially reading or writing files outside the intended directories. This can lead to unauthorized access to sensitive information or modification of files. The impact is rated medium severity with a CVSS 3.1 score of 5.1. There are no confirmed reports of exploitation in the wild at this time.

A patch identified by commit c93ef45cba75295eba26d9ff1ffb9202a91c6150 is available and should be deployed to remediate this vulnerability. Users of MAA-AI MaaMCP version 1.1.1.dev6+g2e4a41287 are advised to update to the fixed version. Since this is not a cloud service, remediation is the responsibility of the user. No vendor advisory content was provided to indicate alternative mitigations or that no action is required.