CVE-2026-19046

CVE-2026-19046 affects NocteDefensor LudusMCP (up to 1.0.24). The vulnerable element is an unknown function in src/tools/ludusEnvironmentGuidesSearch.ts of the ludus_environment_guides_search component. According to the description, manipulating the guide_name argument enables path traversal, wit...

CVE-2026-19045

NocteDefensor LudusMCP up to version 1.0.24 is affected. The vulnerability resides in the function SecretDialog.showSecretDialog of the file src/utils/secretDialog.ts in the component get_credential_from_user . The issue stems from a manipulation of the argument Description that enables command i...