spire-doc-mcp-server CVE-2026-7314

Q: What is the CVSS score of CVE-2026-7314?

CVE-2026-7314 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-26151 MEDIUM

Path Traversal (CWE-22)

2026-04-28 cna@vuldb.com

Path Traversal

5.5

CVSS 4.0 · Vendor: vuldb

Severity by source

Vendor (vuldb) PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network-accessible unauthenticated API; path traversal yields partial file read/write; no meaningful availability impact identified from traversal alone.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (vuldb).

CVSS VectorVendor: vuldb

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 04:07 vuln.today

CVSS changed

Apr 29, 2026 - 01:12 NVD

6.9 (MEDIUM) 5.5 (MEDIUM)

EUVD ID Assigned

Apr 28, 2026 - 22:22 euvd

EUVD-2026-26151

CVE Published

Apr 28, 2026 - 22:16 nvd

MEDIUM 5.5

DescriptionCVE.org

A vulnerability was detected in eiceblue spire-doc-mcp-server 1.0.0. This affects the function get_doc_path of the file src/spire_doc_mcp/api/base.py. Performing a manipulation of the argument document_name results in path traversal. The attack can be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Path traversal in eiceblue spire-doc-mcp-server 1.0.0 allows remote unauthenticated attackers to escape the intended document directory by supplying crafted sequences in the document_name argument to the get_doc_path function in src/spire_doc_mcp/api/base.py. A public exploit exists and SSVC confirms the attack is automatable with partial technical impact across confidentiality, integrity, and availability. No vendor patch is available - the project has not responded to the coordinated disclosure filed via GitHub issue.

Technical ContextAI

spire-doc-mcp-server is a Model Context Protocol (MCP) server built around eiceblue's Spire.Doc library, designed to expose document processing capabilities as an API. The vulnerable function get_doc_path in src/spire_doc_mcp/api/base.py constructs a filesystem path from the caller-supplied document_name parameter without applying path canonicalization or prefix-enforcement (CWE-22: Improper Limitation of a Pathname to a Restricted Directory). Sequences such as ../ in the parameter allow traversal out of the intended document root. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms this is a network-exposed, unauthenticated API endpoint with no prerequisite attack conditions, and affected versions are confined to release 1.0.0 per EUVD-2026-26151.

RemediationAI

No vendor-released patch is available at time of analysis - the vendor has not responded to disclosure (https://github.com/eiceblue/spire-doc-mcp-server/issues/1). As compensating controls: restrict network access to the MCP server to explicitly trusted hosts or localhost only using firewall rules or network policy, which eliminates the remote attack vector at the cost of reduced accessibility. Run the server process under a dedicated low-privilege OS account with read-only access scoped to the document directory, limiting traversal reach even if exploited. Deploy the service inside a container or chroot jail to constrain the filesystem namespace accessible to the process. As a code-level workaround pending a patch, validate and normalize the document_name parameter to reject any path containing ../, absolute path prefixes, or null bytes before passing it to get_doc_path.