10 matches found
analise-vulnerabilidades-zabbix-notebooklm
š”ļø SQLi Vulnerability Analysis in Zabbix with NotebookLM Thematic Notebook developed as a deliverable for the DIO Project Challenge Using NotebookLM as an active AI tool for curation, synthesis, and organization of knowledge in Cybersecurity š Table of Contents Context and Objectives Source...
EUVD-2026-84173
@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory...
@roomi-fields/notebooklm-mcp has a path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory
Summary The vaultbatch MCP tool and the equivalent POST /batch-to-vault HTTP endpoint accepted a caller-supplied vaultdir path that was passed directly to path.resolve + fs.mkdir with no containment check. A caller ā or a prompt-injected LLM driving the MCP ā could therefore create directories an...
CVE-2026-61647
NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the POST /batch-to-vault endpoint, also exposed through the batchtovault MCP...
CVE-2026-61647
NotebookLM MCP (an MCP server and HTTP service for Google NotebookLM) versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the POST /batch-to-vault endpoint, also reachable via the batch_to_vault MCP tool from version 1.7.0. Attacker-controlled vault_dir and slug_prefix paramete...
CVE-2026-61647 @roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory
NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the POST /batch-to-vault endpoint, also exposed through the batchtovault MCP...
CVE-2026-61647 @roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory
NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the POST /batch-to-vault endpoint, also exposed through the batchtovault MCP...
CVE-2026-61647 @roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory
NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the POST /batch-to-vault endpoint, also exposed through the batchtovault MCP...
PT-2026-96284
Name of the Vulnerable Software and Affected Versions NotebookLM MCP versions 1.6.0 through 2.0.2 Description NotebookLM MCP contains a path traversal issue where attacker-controlled values in the vault dir and slug prefix variables can cause Markdown and JSON files to be written outside the...
CVE-2026-61647: Improper Limitation of a Pathname to a Restricted Directory
NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the POST /batch-to-vault endpoint, also exposed through the batchtovault MCP...