EUVD-2026-26723Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
7DescriptionCVE.org
A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. This affects the function save_document/export_to_text/export_to_html of the file mcp-server/src/index.ts of the component MCP Interface. Performing a manipulation of the argument output_path results in path traversal. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Path traversal in Dayoooun hwpx-mcp 0.2.0 allows authenticated remote attackers to manipulate the output_path argument in save_document, export_to_text, and export_to_html functions, enabling arbitrary file write or read operations outside intended directories. The vulnerability affects the MCP Interface component (mcp-server/src/index.ts) with low confidentiality, integrity, and availability impact. Publicly available exploit code exists, and the vendor has not responded to early disclosure.
Technical ContextAI
The vulnerability resides in the MCP Interface component of hwpx-mcp, specifically within the save_document, export_to_text, and export_to_html functions implemented in mcp-server/src/index.ts. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), where the output_path parameter is not properly validated or sanitized before being used in file operations. This allows path traversal sequences (e.g., ../ or absolute paths) to escape the intended output directory. The MCP (Model Context Protocol) server architecture processes user-supplied output_path arguments without adequate input validation, enabling an authenticated caller to write or read files at arbitrary locations on the system where the service has file access permissions.
RemediationAI
No vendor-released patch is currently available; the maintainer has not responded to disclosure. Immediate mitigations include: (1) Restrict network access to the MCP server to trusted internal networks only, limiting exposure to authenticated attackers; (2) Implement strict input validation in client code calling the vulnerable functions-validate that output_path does not contain path traversal sequences (.., /, or special characters) and enforce a whitelist of allowed output directories; (3) Run the hwpx-mcp service with minimal file system permissions, specifically restricting write access to only necessary directories using OS-level access controls (e.g., chroot, containerization, or file system ACLs); (4) Monitor file system activity for unexpected writes to system directories or config paths. Monitor the GitHub repository (https://github.com/Dayoooun/hwpx-mcp) and VulDB (https://vuldb.com/vuln/360556) for future patch releases. If vendor response remains unavailable, consider forking or patching the code internally by adding path canonicalization and validation in the three affected functions.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today