EUVD-2026-67588
GHSA-947f-v6gc-m8c7
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
PR:L reflects required MCP call access; C:H chosen because arbitrary file read with automatic CDN exfiltration constitutes full confidentiality loss.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
5DescriptionCVE.org
A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component upload_image. Performing a manipulation of the argument image_path results in path traversal. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 1.5.1 is sufficient to fix this issue. The patch is named 7f9a215e03575c650d38c8f87fc6d8d363fed80d. Upgrading the affected component is advised.
AnalysisAI
Path traversal in iswalle getnote-mcp up to version 1.5.0 allows attackers with low-privilege MCP call access to read arbitrary files from the host filesystem via the upload_image tool's unsanitized image_path parameter. The vulnerable fs.readFileSync call in src/index.ts accepts absolute paths and directory traversal sequences, and critically, the read file is automatically uploaded to a public CDN - making this an arbitrary file read with built-in exfiltration, exposing SSH keys, /etc/passwd, and similar sensitive data. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the ability to invoke the upload_image MCP tool on the getnote-mcp server - corresponding to the PR:L (low privileges) metric in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The official CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P) rates confidentiality impact as Low, but this appears to underestimate the real-world impact: the vulnerability enables reading any file accessible to the server process - including SSH private keys and credentials - and automatically exfiltrates the content to a public CDN. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade iswalle getnote-mcp to version 1.5.1, the vendor-confirmed patched release available at https://github.com/iswalle/getnote-mcp/releases/tag/v1.5.1 (patch commit 7f9a215e03575c650d38c8f87fc6d8d363fed80d, https://github.com/iswalle/getnote-mcp/commit/7f9a215e03575c650d38c8f87fc6d8d363fed80d). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today