EUVD-2026-54769
GHSA-h8jj-pqww-5m4w
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local attack vector with low privileges required to call the Journey API; all three impact dimensions are low and scope is unchanged.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_journey/analyze_journey/usage_stats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path traversal. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Path traversal in Hulupeep mcp-ui-probe 0.1-0.2.0 allows a local authenticated user to read, write, or delete arbitrary files by manipulating the journeyId or filename arguments passed to the Journey and Usage API functions in JourneyStorage.ts. The CVSS 4.0 E:P supplemental metric confirms publicly available proof-of-concept exploit code exists, raising real-world risk above what the moderate base score alone suggests. No vendor patch is available; the project has not responded to the responsible disclosure submitted via GitHub issue.
Technical ContextAI
mcp-ui-probe (CPE: cpe:2.3:a:hulupeep:mcp-ui-probe:*:*:*:*:*:*:*:*) is an early-stage MCP (Model Context Protocol) UI probing utility. The vulnerability resides in src/journey/JourneyStorage.ts and affects four exported functions - get_journey, delete_journey, analyze_journey, and usage_stats - each of which accepts caller-controlled string arguments (journeyId or filename) that are concatenated into filesystem paths without sanitization or canonicalization. CWE-22 (Path Traversal) describes this root cause: the absence of path normalization allows sequences such as '../../../etc/passwd' to escape the intended storage directory and reference arbitrary filesystem locations accessible to the process.
RemediationAI
No vendor-released patch has been identified at time of analysis - the project maintainer has not responded to the responsible disclosure. The primary recommended action is to remove or disable mcp-ui-probe entirely from any multi-user or shared environment until a patched release is available. As a compensating control, restrict filesystem permissions on the directory mcp-ui-probe uses for journey storage so that the process runs under a dedicated low-privilege account with access limited strictly to its intended storage path; this limits traversal reach but does not eliminate the vulnerability. Additionally, deploy OS-level mandatory access controls (e.g., AppArmor or SELinux profiles) to confine the process to its expected directory tree - note that writing and maintaining such profiles requires operational overhead. Monitor the GitHub repository at https://github.com/Hulupeep/mcp-ui-probe/ for any patched release and upgrade immediately when available. VulDB tracking is available at https://vuldb.com/vuln/387013.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today