Threats affecting pkg:github/elinsky/execution-system-mcp

CVE-2026-7319 is a path traversal vulnerability in elinsky execution-system-mcp version 0.1.0. The flaw exists in the _get_context_file_path function within src/execution_system_mcp/server.py, specifically in the add_action Tool component. This vulnerability allows remote attackers to manipulate the context argument to perform path traversal. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. An exploit has been published, but there are no known exploits in the wild at this time.