EUVD-2026-83770
GHSA-wvg2-xpp5-j725
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated remote write with attacker-controlled path and content gives high integrity impact (potential source/config overwrite) and some availability impact; no read primitive so C:N.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546. This issue affects the function create_file of the file app/api/mcp/route.ts. Such manipulation of the argument filePath/content leads to path traversal. The attack can be launched remotely. The exploit is publicly available and might be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Path traversal in the create_file tool served by the 03-lovepreetSingh MCP application's /api/mcp route lets remote, unauthenticated attackers supply a crafted filePath that escapes the intended base directory and write attacker-controlled content to arbitrary locations on the host filesystem. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/C:N/I:H/A:L) reflects a high integrity impact with a limited availability impact, and publicly available exploit code exists via the project's own issue tracker (GitHub issue #3); there is no evidence of confirmed active exploitation (CISA KEV). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires a reachable instance of the 03-lovepreetSingh MCP application exposing the /api/mcp route (app/api/mcp/route.ts) with the create_file function accessible; the attacker must control the filePath and content arguments. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Signals are mixed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch identified at time of analysis: the maintainer was notified through the project issue tracker (https://github.com/03-lovepreetSingh/MCP/issues/3) and has not responded, and no fixed commit or tagged release is referenced in the available intelligence (https://vuldb.com/vuln/407973, https://vuldb.com/vuln/407973/cti). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Authenticated attackers holding Subscriber-level (or higher) WordPress accounts can escalate themselves to Administrator
Server-side request forgery in fast-mcp-telegram prior to version 30.1 allows an authenticated MCP client (CVSS PR:L) to
OS command injection in the Git Remove MCP Tool of 0xshariq github-mcp-server (all revisions up to commit 52e764a7d66eac
OS command injection in mbailey VoiceMode through version 8.10.1 lets an authenticated local attacker who can reach the
A directory traversal flaw in mark3labs mcp-filesystem-server v0.11.1 lets a caller write files outside the server's con
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today