EUVD-2026-54948
GHSA-hj87-3g9g-3832
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only attack requiring low-privilege invocation of the tool; limited partial file read/write with no scope change beyond the vulnerable component.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_creds_range_config. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricted to local execution. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Path traversal in NocteDefensor LudusMCP (all versions up to 1.0.24) enables a locally authenticated low-privilege user to read or overwrite files outside the intended directory by manipulating the configPath or outputPath arguments of the insert_creds_range_config tool. The flaw resides in src/tools/insertCredsRangeConfig.ts and is confined to local execution. Proof-of-concept exploit code exists (CVSS 4.0 E:P), and no patch has been released despite vendor notification via a public GitHub issue; no public exploit identified at time of analysis beyond the PoC.
Technical ContextAI
LudusMCP is an MCP (Model Context Protocol) server tool by NocteDefensor, providing credential range configuration via the insert_creds_range_config tool implemented in src/tools/insertCredsRangeConfig.ts. CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) identifies the root cause: user-supplied path arguments configPath and outputPath are passed to file system operations without adequate sanitization or canonicalization, permitting path traversal sequences (e.g., ../) to escape the intended working directory. The CPE string cpe:2.3:a:noctedefensor:ludusmcp:*:*:*:*:*:*:*:* indicates all tracked versions up to 1.0.24 are vulnerable with no version floor specified, suggesting the flaw may exist from the project's inception.
RemediationAI
No vendor-released patch has been identified at time of analysis. The vendor was notified via GitHub issue (https://github.com/NocteDefensor/LudusMCP/issues/5) but has not responded. As an immediate compensating control, restrict which local accounts can invoke the insert_creds_range_config tool - limiting execution to trusted administrators reduces the attack surface to privileged users only, though it does not eliminate the flaw. Running LudusMCP in a containerized or chrooted environment with a constrained filesystem mount will limit the directories reachable via traversal, but introduces operational overhead in configuring accessible paths. OS-level file permissions can further restrict what files the LudusMCP process user can read or write, partially mitigating traversal impact. Monitor the VulDB entry at https://vuldb.com/vuln/387233 and the GitHub repository for patch availability.
Path traversal in NocteDefensor LudusMCP up to version 1.0.24 allows a low-privileged local user to read files outside t
Command injection in NocteDefensor LudusMCP through version 1.0.24 allows a local attacker with low privileges to execut
Command injection in NocteDefensor LudusMCP (all versions through 1.0.24) permits a local low-privileged attacker to exe
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today