EUVD-2026-26274Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-accessible unauthenticated path traversal enables file read (C:L) and write (I:L); no mechanism for availability impact from traversal alone, so A:N.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionCVE.org
A weakness has been identified in florensiawidjaja BioinfoMCP up to 7ada7918b9e515604d3c0ae264d3a9af10bf6e54. This vulnerability affects the function Upload of the file bioinfo_mcp_platform/app.py of the component Upload Endpoint. This manipulation of the argument Name causes path traversal. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Path traversal in BioinfoMCP's Upload Endpoint allows remote unauthenticated attackers to read or write files outside the intended directory by manipulating the Name argument in the Upload function (bioinfo_mcp_platform/app.py). The affected product is florensiawidjaja's BioinfoMCP at or before commit 7ada7918b9e515604d3c0ae264d3a9af10bf6e54, a bioinformatics platform using continuous rolling releases. A public exploit exists via GitHub issue report, and SSVC classifies the attack as automatable with partial technical impact; however, EPSS remains very low at 0.05% (14th percentile), consistent with an obscure research tool rather than widespread enterprise software. No vendor patch or response has been issued as of the time of this analysis.
Technical ContextAI
BioinfoMCP (CPE: cpe:2.3:a:florensiawidjaja:bioinfomcp:*:*:*:*:*:*:*:*) is a bioinformatics platform whose upload endpoint is implemented in bioinfo_mcp_platform/app.py. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory - Path Traversal): the server-side Upload function accepts a user-supplied Name argument without sanitizing directory traversal sequences (e.g., '../'). This allows an attacker to escape the intended upload directory and place or access files at arbitrary filesystem paths accessible to the server process. The vulnerability is exposed over the network with no authentication or user interaction required (AV:N/AC:L/PR:N/UI:N in the CVSS 4.0 vector), meaning any host that can reach the upload endpoint is potentially exploitable. The CVSS 4.0 base vector confirms partial impact across confidentiality, integrity, and availability of the vulnerable system (VC:L/VI:L/VA:L), consistent with file read/write access outside the web root.
RemediationAI
No vendor-released patch has been identified at time of analysis. The project maintainer was notified via an issue report but has not responded. Organizations running BioinfoMCP should immediately restrict network access to the upload endpoint using a web application firewall or reverse proxy ACL, blocking access from untrusted networks or anonymous users. As a specific compensating control, disabling or removing the Upload Endpoint entirely (the relevant handler in bioinfo_mcp_platform/app.py) eliminates the attack surface if file upload functionality is not operationally required - note this will break any upload-dependent workflows. If upload functionality is required, configure the server process to run under a least-privilege OS account with write access restricted to a single sandboxed upload directory, and add server-side filename sanitization to strip traversal sequences before path resolution. Monitor VulDB advisory https://vuldb.com/vuln/360122 and the GitHub repository for a patched commit.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today