CVE-2026-7627

The CVE-2026-7627 vulnerability affects 8nite metatrader-4-mcp 1.0.0 in the Sync EAs from file path: the CallToolRequestSchema function in src/index.ts misuses the ea_name argument, enabling path traversal. This is a remote exploit with publicly disclosed details. Impact is described as low-to-mo...

CVE-2026-7627

A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0. This vulnerability affects the function CallToolRequestSchema of the file src/index.ts of the component synceafromfile. Such manipulation of the argument eaname leads to path traversal. The attack can be launched remotely...

EUVD-2026-26777

A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0. This vulnerability affects the function CallToolRequestSchema of the file src/index.ts of the component synceafromfile. Such manipulation of the argument eaname leads to path traversal. The attack can be launched remotely...