CVE-2026-7315

The CVE affects eiceblue spire-pdf-mcp-server v0.1.1 (PDF File Handler, get_pdf_path). A flaw allows path traversal via a manipulated filepath, enabling a remote attack. Exploit has been published; the project was informed early via an issue but has not responded. No remediation or patch version ...

PT-2026-35828

Name of the Vulnerable Software and Affected Versions eiceblue spire-pdf-mcp-server version 0.1.1 Description A flaw in the PDF File Handler component allows for remote path traversal. This occurs when the filepath argument is manipulated within the get pdf path function located in the src/spire...