CVE-2026-81845: Path Traversal in arben-adm mcp-sequential-thinking
Description
CVE-2026-81845 is a path traversal vulnerability in the arben-adm mcp-sequential-thinking component affecting versions up to 0.5.0. The flaw exists in the import_session/export_session functions of mcp_sequential_thinking/server.py, where manipulation of the file_path argument allows remote attackers to perform path traversal. The vulnerability has been publicly disclosed and a patch is available in version 0.6.0.
CVSS v4.0
Score 5.3medium
Affected software
arben-adm
mcp-sequential-thinking
cpe:2.3:a:arben-adm:mcp-sequential-thinking:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in arben-adm mcp-sequential-thinking up to version 0.5.0 allows remote attackers to exploit a path traversal issue via the file_path argument in the import_session/export_session functions within mcp_sequential_thinking/server.py. This can lead to unauthorized access to files outside the intended directory. The issue is fixed by upgrading to version 0.6.0, with the patch identified by commit 2fad3ee8ab1d0868b6c1afb5895bc336a10e5267.
Potential Impact
Successful exploitation allows remote attackers to traverse directories and potentially access or manipulate files outside the intended scope of the application. This can lead to information disclosure or unauthorized file operations. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality, integrity, and availability impact.
Mitigation Recommendations
Upgrade the arben-adm mcp-sequential-thinking component to version 0.6.0 or later, which contains the official fix for this path traversal vulnerability. No other mitigations are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-27T16:07:21.555Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a916b3facd9273b49cabea2
Added to database: 08/28/2026, 11:04:31 UTC
Last enriched: 09/07/2026, 15:15:40 UTC
Last updated: 10/13/2026, 18:48:24 UTC
Views: 74
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.