Kinser Open Warehouse Execution System Authorization Vulnerability

The Kinser Open Warehouse Execution System versions 1.0.0 and earlier have an authorization vulnerability. This vulnerability arises from the GlobalGatewayFilter not implementing the authwarehouse scope limitation, allowing for unauthorized access. Attackers with menu permissions can enumerate th...

controlled-execution-system (>=0.1.25, <=0.1.31), wandelbots-nova (>=5.1.2, <=5.7.4) potentially affected by CVE-2026-47103 via python-statemachine (>=3.0.0, <=3.1.2)

python-statemachine PYPI version =3.0.0, =0.1.25, =5.1.2, =5.7.4 Source cves: CVE-2026-47103 Source advisory: OSV:PYSEC-2026-506...

controlled-execution-system (>=0.1.25, <=0.1.31), wandelbots-nova (>=5.1.2, <=5.7.4) potentially affected by CVE-2026-47103 via python-statemachine (>=3.0.0, <=3.1.2)

python-statemachine PYPI version =3.0.0, =0.1.25, =5.1.2, =5.7.4 Source cves: CVE-2026-47103 Source advisory: GHSA-V4JC-PM6R-3VJ8...

controlled-execution-system (>=0.1.25, <=0.1.31), wandelbots-nova (>=5.1.2, <=5.7.4) potentially affected by CVE-2026-47103 via python-statemachine (>=3.0.0, <=3.1.2)

python-statemachine PYPI version =3.0.0, =0.1.25, =5.1.2, =5.7.4 Source cves: CVE-2026-47103 Source advisory: OSV:GHSA-V4JC-PM6R-3VJ8...

controlled-execution-system (>=0.1.25, <=0.1.31), wandelbots-nova (>=5.1.2, <=5.7.4) potentially affected by CVE-2026-47103 via python-statemachine (>=3.0.0, <=3.1.2)

python-statemachine PYPI version =3.0.0, =0.1.25, =5.1.2, =5.7.4 Source cves: CVE-2026-47103 Source advisory: SNYK:PYTHON-PYTHONSTATEMACHINE-17675195...

controlled-execution-system (>=0.1.25, <=0.1.31), wandelbots-nova (>=5.1.2, <=5.7.4) potentially affected by CVE-2026-47103 via python-statemachine (>=3.0.0, <=3.1.2)

python-statemachine PYPI version =3.0.0, =0.1.25, =5.1.2, =5.7.4 Source cves: CVE-2026-47103 Source advisory: MEND:CVE-2026-47103...

CVE-2026-7319

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

CVE-2026-7319

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

CVE-2026-7319 elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

CVE-2026-7319 elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

CVE-2026-7319

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

CVE-2026-7319

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

CVE-2026-7319

CVE-2026-7319 affects elinsky execution-system-mcp 0.1.0. The vulnerability is in the function _get_context_file_path (src/execution_system_mcp/server.py, add_action Tool), where improper handling of the context argument enables path traversal. Attack can be initiated remotely; the exploit has be...

EUVD-2026-26156

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

PT-2026-35832

Name of the Vulnerable Software and Affected Versions elinsky execution-system-mcp version 0.1.0 Description A path traversal flaw exists in the add action Tool within the get context file path function of the src/execution system mcp/server.py file. A remote attacker can initiate this attack by...

Execution System MCP Server Path Traversal Vulnerability

The Execution System MCP Server is an AI-native execution system server developed by Brian Elinsky. Version 0.1.0 of the Execution System MCP Server contains a path traversal vulnerability. This vulnerability arises from the parameter context in the getcontextfilepath function of the addaction...

CVE-2026-7319: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function getcontextfilepath of the file src/executionsystemmcp/server.py of the component addaction Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely...

CVE-2025-40746

A vulnerability has been identified in SIMATIC RTLS Locating Manager All versions V3.2. Affected products do not properly validate input for a backup script. This could allow an authenticated remote attacker with high privileges in the application to execute arbitrary code with 'NT...

CVE-2020-10138

Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkinsagent\. Acronis Cyber Backup and Cyber Protect contain a privileged service that uses this OpenSSL component. Because unprivileged Windows users can...

CVE-2020-10139

Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkinsagent\. Acronis True Image contains a privileged service that uses this OpenSSL component. Because unprivileged Windows users can create subdirectories off of the system...