Threats tagged 'ghsa-g88g-gjr5-6xh7'

CVE-2026-7627 is a path traversal vulnerability in 8nite metatrader-4-mcp version 1.0.0 affecting the CallToolRequestSchema function in src/index.ts within the sync_ea_from_file component. The vulnerability allows remote attackers to manipulate the ea_name argument to perform path traversal. The issue was reported early but remains unpatched. Public exploit details have been disclosed. The CVSS score is 6.3, indicating medium severity.