CVE-2026-19038

CVE-2026-19038 affects MonomythDevelopment la-forge-mcp 1.0.0, specifically the screenshotElement function in src/index.ts of the screenshot_element Tool. The issue arises from manipulation of the argument output_name, enabling path traversal. The vulnerability is exploitable remotely via a netwo...

PT-2026-68484

Name of the Vulnerable Software and Affected Versions MonomythDevelopment la-forge-mcp versions prior to 1.1.1 Description A path traversal issue exists in the screenshotElement function within the src/index.ts file of the screenshot element Tool. This flaw allows a remote attacker to manipulate...