gemsuite-mcp CVE-2026-19368

Q: What is the CVSS score of CVE-2026-19368?

CVE-2026-19368 has a CVSS 4.0 base score of 4.8 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-54952 MEDIUM

Path Traversal (CWE-22)

2026-08-09 VulDB

GHSA-5r3x-hrv2-fg58

Path Traversal Gemsuite Mcp

4.8

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

4.8 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

3.3 LOW

Local attack vector with low-privilege requirement matches description; confidentiality limited to file reads, no integrity or availability impact applies.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 09, 2026 - 21:15 vuln.today

DescriptionCVE.org

A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by this issue is some unknown functionality of the file src/handlers/unified-gemini.ts of the component gemini_search/gemini_reason/gemini_process/gemini_analyze. The manipulation of the argument file_path/file_paths results in path traversal. The attack must be initiated from a local position. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Path traversal in PV-Bhat gemsuite-mcp 1.0.0 exposes arbitrary local files to any authenticated local user who can invoke the tool's Gemini handler functions. The flaw resides in src/handlers/unified-gemini.ts and affects the gemini_search, gemini_reason, gemini_process, and gemini_analyze handlers, all of which accept file_path or file_paths arguments without sufficient sanitization. No patch has been released and the project has not responded to the responsible disclosure; no public exploit or active exploitation has been identified at time of analysis.

Technical ContextAI

gemsuite-mcp (CPE: cpe:2.3:a:pv-bhat:gemsuite-mcp:*:*:*:*:*:*:*:*) is a Model Context Protocol (MCP) server that bridges local Gemini AI capabilities to MCP-compatible clients. The affected component, src/handlers/unified-gemini.ts, implements multiple handler functions that accept file system paths as user-controlled input. CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) describes the root cause: the application constructs filesystem paths from attacker-supplied arguments without canonicalizing them or enforcing a chroot-style boundary, allowing sequences such as '../../' to escape the intended working directory and reference arbitrary files accessible to the process owner.

RemediationAI

No vendor-released patch has been identified at time of analysis; the project maintainer had not responded to the disclosure as of the report date. The primary recommended action is to avoid deploying gemsuite-mcp 1.0.0 in environments where untrusted local users can invoke MCP tool calls. As a compensating control, restrict OS-level file permissions so the process account running gemsuite-mcp can only read directories it legitimately requires, limiting the blast radius of path traversal to a narrow directory tree - note this does not eliminate the vulnerability but reduces its impact. Additionally, administrators can wrap the MCP server process in a filesystem namespace or container with a read-only bind-mount restricted to approved directories. Monitor the upstream repository at https://github.com/PV-Bhat/gemsuite-mcp/ and the issue thread at https://github.com/PV-Bhat/gemsuite-mcp/issues/3 for any patch release.