PT-2026-68484

Name of the Vulnerable Software and Affected Versions MonomythDevelopment la-forge-mcp versions prior to 1.1.1 Description A path traversal issue exists in the screenshotElement function within the src/index.ts file of the screenshot element Tool. This flaw allows a remote attacker to manipulate...

PT-2026-68500

A flaw has been found in LeeSinLiang godot-mcp 0.1.0. Affected by this vulnerability is the function executeOperation of the file src/index.ts of the component create scene/add node. This manipulation of the argument projectPath causes command injection. The attack needs to be launched locally. T...

PT-2026-68615

Name of the Vulnerable Software and Affected Versions NocteDefensor LudusMCP versions prior to 1.0.25 Description A path traversal issue exists within the ludus environment guides search component, specifically in a function located in the src/tools/ludusEnvironmentGuidesSearch.ts file. This occu...

PT-2026-68494

Name of the Vulnerable Software and Affected Versions MissionSquad mcp-api versions prior to 1.11.10 Description A remote flaw exists in a function within the src/services/dcrClients.ts file. This issue allows for server-side request forgery, a technique where an attacker induces the server to ma...

PT-2026-68412

Name of the Vulnerable Software and Affected Versions mf-yang openclaw-cn versions prior to 0.2.2 Description A remote attack is possible in the apply patch Tool component due to an issue in the assertNoSymlinkEscape function within the src/agents/sandbox-paths.ts file. This flaw allows for link...

PT-2026-68414

Name of the Vulnerable Software and Affected Versions TinyAGI version 0.0.20 Description A remote attack can be launched against the Message API Endpoint due to missing authorization. The issue resides in the processMessage function within the packages/main/src/index.ts file. Recommendations As a...

PT-2026-68501

Name of the Vulnerable Software and Affected Versions NocteDefensor LudusMCP versions prior to 1.0.25 Description Command injection is possible on the local host through the manipulation of the Description argument within the SecretDialog.showSecretDialog function, located in the...

PT-2026-68413

Name of the Vulnerable Software and Affected Versions TinyAGI version 0.0.20 Description A remote file inclusion issue exists within the Message API Endpoint component. The flaw is located in the collectFiles function within the packages/core/src/response.ts file, allowing an attacker to remotely...

CVE-2026-19040: Server-Side Request Forgery (SSRF)

A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affected element is an unknown function of the file src/services/dcrClients.ts. Executing a manipulation can lead to server-side request forgery. The attack may be performed from remote. Upgrading to version 1.11.10 is sufficient to...

CVE-2026-19044: Improper Neutralization of Special Elements used in a Command

A flaw has been found in LeeSinLiang godot-mcp 0.1.0. Affected by this vulnerability is the function executeOperation of the file src/index.ts of the component createscene/addnode. This manipulation of the argument projectPath causes command injection. The attack needs to be launched locally. The...

CVE-2026-18997: Incorrect Authorization

A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12. This issue affects the function Agent.handleBgCommand of the file src/core/agent.ts of the component bg Command Handler. Performing a manipulation results in incorrect authorization. It is possible to initiate the attack...

CVE-2026-18990: Missing Authentication for Critical Function

A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file src/api/server.ts of the component API Status Route. The manipulation results in missing authentication. The attack may be performed from remote. The exploit is now public and may be used. The...

CVE-2026-19006: Incorrect Authorization

A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-tools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation results in incorrect authorization. The attack may be performed from remote. The exploit has been made...

CVE-2026-19038: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...

PT-2026-68163

Name of the Vulnerable Software and Affected Versions Bolt CMS affected versions not specified Description Bolt CMS renders content field values using the full Twig application-level Environment without a SandboxExtension. In the src/Entity/Field.php file, the getTwigValue function calls...

PT-2026-68150

Name of the Vulnerable Software and Affected Versions rust-iot-platform affected versions not specified Description The AuthToken request-guard implementation in api/src/main.rs fails to validate the value of the Authorization HTTP header against a session, token store, or signature. It only...

CVE-2026-71215: Improper Limitation of a Pathname to a Restricted Directory

art-template's sub-template resolution logic src/compile/adapter/resolve-filename.js, used by both the include and extend template directives, resolves the target file path via path.resolveroot, filename with no check afterward that the result remains inside root...

PT-2026-68155

Name of the Vulnerable Software and Affected Versions ChirpStack affected versions not specified Description An authenticated user with device-list access can perform SQL injection when the SQLite backend is used. The issue occurs because the user-supplied tag key is interpolated directly into a...

CVE-2026-71202: Integer Underflow (Wrap or Wraparound)

The raster Rust crate's crop function src/editor.rs clamps the crop width/height against source dimensions but only clamps the offsetx/offsety parameters against 0, never against the source width/height...

PT-2026-68140

Name of the Vulnerable Software and Affected Versions microtar affected versions not specified Description The mtar write file header and mtar write dir header functions in src/microtar.c contain a stack buffer overflow. This occurs because a caller-supplied entry name is copied into the 100-byte...