mcp-project CVE-2026-7318

Q: What is the CVSS score of CVE-2026-7318?

CVE-2026-7318 has a CVSS 4.0 base score of 2.0 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-26155 LOW

Path Traversal (CWE-22)

2026-04-28 cna@vuldb.com

Path Traversal

2.0

CVSS 4.0 · Vendor: vuldb

Severity by source

Vendor (vuldb) PRIMARY

2.0 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.9 MEDIUM

Local-only vector (AV:L) per description and CVSS 4.0 source; no application-level privileges required (PR:N); partial impact across all three CIA dimensions with unchanged scope.

3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.0 AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (vuldb).

CVSS VectorVendor: vuldb

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 04:05 vuln.today

Severity Changed

Apr 29, 2026 - 01:12 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:12 NVD

5.1 (MEDIUM) 2.0 (LOW)

EUVD ID Assigned

Apr 28, 2026 - 22:22 euvd

EUVD-2026-26155

CVE Published

Apr 28, 2026 - 22:16 nvd

LOW 2.0

DescriptionCVE.org

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function search_papers of the file research_server.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Path traversal in elie's mcp-project 0.1.0 exposes local filesystem paths through the search_papers function in research_server.py, where the unsanitized topic argument can be manipulated to traverse directory boundaries. The vulnerability produces partial confidentiality, integrity, and availability impact (VC:L/VI:L/VA:L) and is confined to local attack scenarios. A public proof-of-concept exists per SSVC and VulDB reporting, though EPSS places exploitation probability at 0.02% (4th percentile) and SSVC confirms the attack is not automatable - indicating low real-world threat despite POC availability.

Technical ContextAI

CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) describes the root cause: the search_papers function in research_server.py constructs a filesystem path using the caller-supplied topic argument without adequate canonicalization or boundary enforcement. This allows sequences such as ../../ to escape the intended working directory. The affected product is an MCP (Model Context Protocol) research server - a lightweight Python-based tool designed to serve research queries locally. Only version 0.1.0 is confirmed affected per EUVD-2026-26155. No CPE string was provided in the source data.

RemediationAI

No vendor-released patch has been identified at time of analysis. The project maintainer was notified via a GitHub issue report but has not responded. As an immediate compensating control, restrict local system access to the mcp-project server process to trusted users only, preventing untrusted local principals from invoking search_papers with attacker-controlled input - this is the most effective mitigation given the local attack vector. Operators may also implement input validation at the application boundary to reject topic arguments containing path traversal sequences (e.g., ../), though this requires code modification. Monitor the GitHub repository at https://github.com/elie/mcp-research-server and VulDB entry https://vuldb.com/vuln/359971 for any future patch releases. Given the minimal footprint of this project, replacing or discontinuing use pending a maintainer response is a viable option.