Lucene search
+L

5 matches found

NVD
NVD
•added 2026/04/28 10:16 p.m.•17 views

CVE-2026-7318

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function searchpapers of the file researchserver.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was...

5.9CVSS0.00228EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/28 8:45 p.m.•29 views

CVE-2026-7318

The CVE affects elie mcp-project 0.1.0, specifically the function search_papers in research_server.py. The vulnerability arises from path traversal when manipulating the topic argument. Local access is required for exploitation, and the exploit is publicly available. No remediation or patch detai...

5.9CVSS5.8AI score0.00228EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/28 8:45 p.m.•6 views

CVE-2026-7318 elie mcp-project research_server.py search_papers path traversal

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function searchpapers of the file researchserver.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was...

5.9CVSS5.8AI score0.00228EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•17 views

PT-2026-35831

Name of the Vulnerable Software and Affected Versions elie mcp-project version 0.1.0 Description A path traversal issue exists in the search papers function within the research server.py file. This occurs when the topic argument is manipulated, allowing for unauthorized file system access. Local...

5.9CVSS6.2AI score0.00228EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•3 views

CVE-2026-7318: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function searchpapers of the file researchserver.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was...

5.9CVSS5.8AI score0.00228EPSS
SaveExploits0References2
Rows per page
Query Builder