image-gen-mcp CVE-2026-19365

Q: What is the CVSS score of CVE-2026-19365?

CVE-2026-19365 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-54938 LOW

Path Traversal (CWE-22)

2026-08-09 VulDB

GHSA-xm38-q6p9-jrgg

Path Traversal Image Gen Mcp

1.9

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.9 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Local-only attack requiring low-privilege access; no scope change; all three CIA impacts limited to low-severity file read/write outside intended directory.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Aug 09, 2026 - 19:22 NVD

MEDIUM LOW

CVSS changed

Aug 09, 2026 - 19:22 NVD

4.8 (MEDIUM) 1.9 (LOW)

Analysis Generated

Aug 09, 2026 - 19:00 vuln.today

DescriptionCVE.org

A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscale_images. Such manipulation of the argument output_path leads to path traversal. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Path traversal in Ichigo3766 image-gen-mcp 0.1.0 allows a local low-privileged attacker to read or write files outside the intended directory by supplying a crafted output_path argument to the upscale_images function in src/index.ts. The CVSS 4.0 vector includes E:P, indicating proof-of-concept exploit code exists. No vendor patch has been released; the project has not responded to the coordinated disclosure filed via GitHub issue.

Technical ContextAI

image-gen-mcp is a Model Context Protocol (MCP) server - a lightweight local service that exposes AI-assisted image generation and processing capabilities to MCP-compatible clients. The affected component, upscale_images, accepts an output_path parameter that is passed without sufficient sanitization or canonicalization to file system operations in src/index.ts. CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) describes this class: when user-supplied path components such as ../ sequences are not neutralized before use in file I/O calls, an attacker can escape the intended output directory. The affected CPE is cpe:2.3:a:ichigo3766:image-gen-mcp:*:*:*:*:*:*:*:*, covering version 0.1.0 and potentially all versions given the wildcard range.

RemediationAI

No vendor-released patch has been identified at time of analysis. The project was notified through GitHub issue #6 (https://github.com/Ichigo3766/image-gen-mcp/issues/6) but has not responded. As a compensating control, operators should restrict which users or processes are permitted to invoke the MCP server - since the attack requires local low-privilege access, limiting the server to isolated or sandboxed user accounts reduces blast radius. Additionally, applying OS-level mandatory access controls (e.g., AppArmor or SELinux profiles) to confine the Node.js process to an explicit write-allowlist of directories would prevent traversal even if the flaw is exercised; the trade-off is configuration overhead and potential breakage of legitimate output paths. Removing or disabling the upscale_images tool from the MCP server configuration is the most effective interim mitigation if that feature is not required. Monitor the GitHub repository for an upstream fix.