sublinear-time-solver version 1.5.0 contains a path traversal vulnerability in the export_state function of the MCP Interface component. This flaw allows remote attackers to manipulate file paths, potentially leading to unauthorized file access or modification. The vulnerability has a CVSS score of 6.5 (medium severity) and public exploit code is available. The project has been notified but has not yet issued a response or patch.