CVE-2026-81847

MAA-AI MaaMCP versions up to 1.1.1.dev6+g2e4a41287 are affected by a path traversal vulnerability in the save_pipeline/load_pipeline functions of pipeline_tools.py . The flaw allows a remote attacker with low privileges and user interaction to manipulate file paths, potentially reading or writing...