Is there a public PoC exploit available for CVE-2026-7403?

Yes, a public proof-of-concept exploit is available for CVE-2026-7403. Prioritise patching immediately. EPSS: 0.0%.

geldata gel-mcp CVE-2026-7403

Q: What is the CVSS score of CVE-2026-7403?

CVE-2026-7403 has a CVSS 4.0 base score of 5.5 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-26287 MEDIUM

Path Traversal (CWE-22)

2026-04-29 VulDB

Path Traversal Gel Mcp

5.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 21:22 NVD

5.3 (MEDIUM) 5.5 (MEDIUM)

PoC Detected

Apr 29, 2026 - 21:16 vuln.today

Public exploit code

Analysis Generated

Apr 29, 2026 - 20:57 vuln.today

EUVD ID Assigned

Apr 29, 2026 - 20:45 euvd

EUVD-2026-26287

Analysis Generated

Apr 29, 2026 - 20:45 vuln.today

CVE Published

Apr 29, 2026 - 20:00 nvd

MEDIUM 5.5

DescriptionCVE.org

A security flaw has been discovered in geldata gel-mcp 0.1.0. This impacts the function list_rules/fetch_rule of the file src/gel_mcp/server.py. The manipulation of the argument rule_name results in path traversal. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Path traversal in geldata gel-mcp 0.1.0 allows remote unauthenticated attackers to read arbitrary files via manipulation of the rule_name argument in the list_rules and fetch_rule functions. The vulnerability has a CVSS score of 5.3 (Low confidentiality impact) with network accessibility and no authentication requirements. Public exploit code exists and the vendor has not responded to early disclosure.

Technical ContextAI

The vulnerability exists in src/gel_mcp/server.py where the rule_name parameter is processed without proper path validation in the list_rules and fetch_rule functions. CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) indicates that user-supplied input is concatenated directly into file paths without sanitizing directory traversal sequences such as '../'. geldata gel-mcp appears to be a Model Context Protocol (MCP) server implementation that handles rule file operations. An attacker can exploit this by injecting path traversal payloads (e.g., '../../etc/passwd') into the rule_name parameter to access files outside the intended rule directory.

RemediationAI

No vendor-released patch identified at time of analysis. The vendor was informed early through issue report (GitHub issue #11) but has not responded or provided a fix. Immediate mitigation options include: (1) Upgrade to a patched version if released by the geldata project after this advisory; (2) Disable or restrict network access to the gel-mcp server using firewall rules or network segmentation, allowing only trusted internal clients; (3) Run gel-mcp in a container or sandboxed environment with restricted filesystem permissions, limiting the scope of readable files; (4) Monitor access logs for path traversal patterns (../, double-encoded sequences, etc.) to detect exploitation attempts. The safest interim measure is to disable gel-mcp deployments in production until a patch is available.