CVE-2026-116045

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function getreference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP Interface. The manipulation of the argument Name results in path traversal. It is possible to laun...

CVE-2026-116045 1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function getreference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP Interface. The manipulation of the argument Name results in path traversal. It is possible to laun...

EUVD-2026-109354

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function getreference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP Interface. The manipulation of the argument Name results in path traversal. It is possible to laun...

CVE-2026-116045 1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function getreference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP Interface. The manipulation of the argument Name results in path traversal. It is possible to laun...

CVE-2026-116045

The 1999AZZAR designer-mcp software (up to version 2.1.0) contains a path traversal vulnerability in the MCP Interface component. Specifically, the get_reference function of the file skills/motion-designer/references/motion-dev-guidelines.md fails to properly sanitize the Name argument, allowing ...

PT-2026-122955

A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get reference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP Interface. The manipulation of the argument Name results in path traversal. It is possible to...

azzar budiyanto The Designer MCP path traversal vulnerability

Azzar Budiyanto: Versions 2.1.0 and earlier of the Designer MCP contain a path traversal vulnerability. This vulnerability stems from improper handling of the Name parameter in the getreference function within the skills/motion-designer/references/motion-dev-guidelines.md file in the MCP Interfac...