Threat Intelligence Database

CVE-2026-19332 is a medium severity command injection vulnerability in NellyW8 MCP4EDA version 1.0.0. It affects an unspecified functionality within the run_openlane/view_waveform component. The vulnerability arises from manipulation of the design_name or vcd_file arguments, allowing command injection. Exploitation requires local access with low privileges. No official patch or vendor response has been reported yet.

CVE-2026-19331 is a path traversal vulnerability in bazylhorsey obsidian-mcp-server version 1.0.0. It affects the readCanvas and writeCanvas functions in the CanvasService.ts file. Exploitation requires local access to the system. The vendor has been informed but has not yet responded or issued a fix. The vulnerability has a medium severity rating with a CVSS score of 4.8.

EvilFontTool is a font-based deception technique that uses specially crafted fonts to display different text to human readers than what is actually stored in the document's machine-readable text. This allows attackers to manipulate documents such as HTML, DOCX, and PDFs to bypass security tools, evade AI content filters, and perform social engineering or red team operations. The technique can be used to poison help desk documentation, bypass email filters, and create traps within corporate networks. Demonstrations show how commands that appear benign to a user can actually execute malicious actions when copied and pasted.

CVE-2026-19330 is a path traversal vulnerability in angrysky56 advanced-reasoning-mcp version 1.0.0. It affects specific functions in the src/index.ts file, allowing an attacker with local access to manipulate file paths. The vulnerability has a medium severity rating with a CVSS score of 4.8. No patch or official remediation has been provided by the vendor as of the publication date.

CVE-2026-10595 is a path traversal vulnerability in parisneo/lollms version 2.1.0 affecting the SPA catch-all route in backend/routers/ui.py. It allows unauthenticated attackers to read arbitrary files on the server by exploiting improper sanitization of user-controlled path input. The issue is resolved in version 3.

CVE-2026-19329 is a command injection vulnerability in the andreahaku codex_mcp tool affecting an unknown function in src/codex-process-simple.ts. The vulnerability arises from improper handling of the argument 'model' and requires local access to exploit. The project does not use versioning, so affected versions cannot be precisely identified. The issue was reported early to the project but has not yet received a response or fix. The CVSS 4.8 score indicates medium severity.

CVE-2026-19328 is a path traversal vulnerability in aktsmm skill-ninja-mcp-server version 0.1.0. The flaw exists in several functions within src/installer.ts where the workspacePath argument can be manipulated to traverse directories. Exploitation requires local access. Upgrading to version 0.1.1 addresses this issue.

CVE-2026-19327 is a path traversal vulnerability in abracadabra50 claude-sesh version 1.0.0. It affects the getEnrichedData/enrichSession function in src/services/enricher.ts. An attacker with local access can manipulate the sessionId argument to perform path traversal. A patch identified by commit 786c9d74800e6d0858b65778f31beb71b3983a50 is available to address this issue.

CVE-2026-19326 is a path traversal vulnerability in Jevon-Zhong Ai-doctor version 0.0.1. It affects the deleteImage function in the filemanagement service, allowing local attackers with limited privileges to manipulate the imagePath argument to access unintended files. The vulnerability requires local access to exploit and has a medium severity score of 4.8. The vendor has not yet responded or provided a fix.

CVE-2026-19325 is a medium severity path traversal vulnerability in the IncomeStreamSurfer roo-code-memory-bank-mcp-server component. It affects the functions readMemoryBankFile and appendMemoryBankEntry in the src/index.ts file, where manipulation of the file_name argument can lead to path traversal. Exploitation requires local access. The product uses a rolling release system, and no specific affected or fixed versions are disclosed. The vendor has not yet responded or provided a patch.