CVE-2026-19328 aktsmm skill-ninja-mcp-server installer.ts uninstallSkill path traversal

A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. The manipulation of the argument workspacePath leads to path traversal. The attack needs to be performed...

PT-2026-69251

Name of the Vulnerable Software and Affected Versions aktsmm skill-ninja-mcp-server version 0.1.0 Description Local manipulation of the workspacePath argument in the getInstalledSkills, installSkill, updateAgentsMd, and uninstallSkill functions within the src/installer.ts file allows for path...

CVE-2026-19328: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. The manipulation of the argument workspacePath leads to path traversal. The attack needs to be performed...