CVE-2026-89039

A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...

CVE-2026-89039

The k6 MCP server is vulnerable to a path traversal flaw in the convert_playwright_script prompt via the playwright_script argument. While @-prefixed paths are restricted to the current working directory, bare paths follow an undocumented code path with no restrictions, allowing callers to read a...

EUVD-2026-92434

A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...

CVE-2026-89039 Arbitrary file read via the convert_playwright_script prompt in mcp-k6

A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...

CVE-2026-89039 Arbitrary file read via the convert_playwright_script prompt in mcp-k6

A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...

pwnproxy

CI: suite · goldens · perf-check — baseline 281.9ms / 19 pages tests/perf/baseline.json — .github/workflows/ci.yml pwnproxy One security testing engine. Every interface. An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams. Security testing is no...

CVE-2026-42271-PoC

CVE-2026-42271 — Аутентифицированная инъекция команд в LiteLLM через тестовые конечные точки MCP stdio LiteLLM POST /mcp-rest/test/connection и POST /mcp-rest/test/tools/list — аутентифицированная инъекция команд через stdio-транспорт MCP. Любой действительный API-ключ может выполнять произвольны...

ai-kubernetes-helm-chart-security

AI в Kubernetes: безопасность Helm-чартов по умолчанию доказательства Этот репозиторий содержит данные и доказательства, лежащие в основе технического отчёта Sorami «AI в Kubernetes: 10 из 14 Helm-чартов поставляются без аутентификации API» версия 1.2. Читайте отчёт здесь:...

probo

Probo Открытая GRC-платформа для инженеров. Probo — это платформа управления, рисков и соответствия GRC с возможностью самостоятельного размещения, созданная для инженерных и security-команд. Она охватывает полный жизненный цикл GRC: выявление рисков, отслеживание контролей, риски поставщиков,...

LLM-MCP-Security-Field-Guide

🛡️ Guide de Sécurité IA — Sécurité LLM et MCP La référence de sécurité la plus complète, à jour et orientée praticiens pour les applications LLM et les déploiements du Model Context Protocol MCP. Couvre les CVEs réels, les schémas d'attaque en direct, les frameworks OWASP, les outils de red teamin...

ai-tool-poisoning-guard

ai-tool-poisoning-guard Minimum security-baseline rule for Claude Code, Codex, and Cursor. This free rule closes a real gap in each tool's built-in review. Full ruleset + implementation guide: Gumroad link — coming soon. Your AI coding assistant reviews code. It doesn't review the sentence that...

super-trouper

Super Trouper MCP-сервер для инструментария обратной разработки Frida. Super Trouper запускает MCP-сервер через STDIO, который предоставляет возможности Frida в виде инструментов для кодирующих агентов. Он может подключаться к локальным, USB- и удалённым устройствам; исследовать приложения и...

PT-2026-106235

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.9.0 Description Authenticated users can achieve Remote Code Execution RCE on the server by adding a Model Context Protocol MCP server using the "Stdio" transport. The command field is passed directly to bash -c "ex...

CVE-2026-89039: Improper Limitation of a Pathname to a Restricted Directory

A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...

PT-2026-106273

Name of the Vulnerable Software and Affected Versions Dify versions prior to 1.16.0 Description An authenticated workspace member can modify the status and parameters of another application's MCP server, which could lead to service disruption or data redirection. This occurs because the...

PT-2026-106234

Name of the Vulnerable Software and Affected Versions Langflow versions 1.6.8 through 1.9.0 Description Langflow fails to properly authorize the resource URI provided to the resources/read endpoint. The read resource function forwards the attacker-controlled URI to handle read resource, which...

PT-2026-106004

The convert playwright script prompt in the k6 MCP server accepts a file path as its playwright script argument. Paths given in the documented '@'-prefixed form are restricted to the server's current working directory, but a bare path is resolved by a separate undocumented code path that applies ...

Arbitrary file read via the convert_playwright_script prompt in mcp-k6

A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...

PT-2026-106232

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.10.3 langflow-base versions prior to 0.10.3 lfx versions prior to 1.10.3 Description An issue exists in the MCP stdio transport where the software executes commands and arguments provided in an MCP server...

ida-pro-mcp

IDA Pro MCP ⚠️ Archived — superseded by the official Hex-Rays IDA MCP server This project is no longer maintained. On 2026-09-27 Hex-Rays SA released the Official IDA MCP Server and IDA Nexus. Development stopped the same day at 1.0.0a4. For current use, install theirs: uvx ida-hcli mcp install. I...