CVE-2026-14699: Symlink Following in zcaceres markdownify-mcp
A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathAllowed of the file src/Markdownify.ts. Executing a manipulation can lead to symlink following. The attack can only be executed locally. The pull request to fix this issue awaits acceptance.
AI Analysis
Technical Summary
CVE-2026-14699 identifies a symlink following vulnerability in the assertPathAllowed function of the markdownify-mcp project by zcaceres, affecting versions 1.0 and 1.1.0. The vulnerability allows local attackers to manipulate path validation logic to follow symbolic links, potentially leading to unauthorized file access or other local impacts. The issue is limited to local attack vectors and does not require user interaction. Although a pull request with a fix exists, it is pending acceptance, and no official patch or remediation has been published.
Potential Impact
The vulnerability allows local attackers to bypass path restrictions by exploiting symlink following in the assertPathAllowed function. This could lead to unauthorized access or modification of files accessible via symbolic links. The impact is limited to local privilege scenarios and does not extend to remote exploitation. The CVSS 4.8 score reflects a medium severity with local attack vector and low complexity.
Mitigation Recommendations
No official fix or patch is currently available as the pull request to address this issue is awaiting acceptance. Users should monitor the project's repository or vendor advisory for updates regarding the acceptance and release of the fix. Until then, restrict local access to trusted users only to reduce risk.
CVE-2026-14699: Symlink Following in zcaceres markdownify-mcp
Description
A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathAllowed of the file src/Markdownify.ts. Executing a manipulation can lead to symlink following. The attack can only be executed locally. The pull request to fix this issue awaits acceptance.
CVSS v4.0
Score 4.8medium
Affected software
pkg:github/zcaceres/markdownify-mcpcpe:2.3:a:zcaceres:markdownify-mcp:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-14699 identifies a symlink following vulnerability in the assertPathAllowed function of the markdownify-mcp project by zcaceres, affecting versions 1.0 and 1.1.0. The vulnerability allows local attackers to manipulate path validation logic to follow symbolic links, potentially leading to unauthorized file access or other local impacts. The issue is limited to local attack vectors and does not require user interaction. Although a pull request with a fix exists, it is pending acceptance, and no official patch or remediation has been published.
Potential Impact
The vulnerability allows local attackers to bypass path restrictions by exploiting symlink following in the assertPathAllowed function. This could lead to unauthorized access or modification of files accessible via symbolic links. The impact is limited to local privilege scenarios and does not extend to remote exploitation. The CVSS 4.8 score reflects a medium severity with local attack vector and low complexity.
Mitigation Recommendations
No official fix or patch is currently available as the pull request to address this issue is awaiting acceptance. Users should monitor the project's repository or vendor advisory for updates regarding the acceptance and release of the fix. Until then, restrict local access to trusted users only to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-07-04T05:22:43.104Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a49dbe327e9c7971905a670
Added to database: 07/05/2026, 04:21:55 UTC
Last enriched: 07/12/2026, 08:54:35 UTC
Last updated: 08/18/2026, 22:49:25 UTC
Views: 98
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.