CVE-2026-7728

creationtimestamp| type| source ---|---|--- 2026-05-04 07:10:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkz4k4l3vs2p...

CVE-2026-7728 ryanjoachim mcp-rtfm MCP update_doc path traversal

A vulnerability was identified in ryanjoachim mcp-rtfm 0.1.0. This vulnerability affects the function getdoccontent/readdoc/updatedoc of the component MCP Interface. Such manipulation of the argument docFile leads to path traversal. The attack can be launched remotely. The exploit is publicly...