CVE-2026-7627: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0. This vulnerability affects the function CallToolRequestSchema of the file src/index.ts of the component synceafromfile. Such manipulation of the argument eaname leads to path traversal. The attack can be launched remotely...

MCP MetaTrader 4 Server 路径遍历漏洞

MCP MetaTrader 4 Server is a cross-platform trading integration tool developed by 8nite, a personal developer. Version 1.0.0 of MCP MetaTrader 4 Server contains a path traversal vulnerability. This vulnerability stems from the operation of the CallToolRequestSchema function in the src/index.ts...

MetaTrader 4 vs MetaTrader 5 iPhone app

By Owais Sultan If you are an online trading enthusiast, you can use MetaTrader 5 and MetaTrader 4 iPhone apps to trade forex. Though the prime objective of MetaTrader 4 iPhone app and MetaTrader 5 iPhone app is to enable users to have great trading experience, these forex trading apps vary in...

MetaTrader 4 - Customized SSL, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application MetaTrader 4 published at the 'play' market has multiple vulnerabilities...