vulnerability · Mon 07 Sep 2026 · 23:16 UTC

CVE-2026-86439: knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments

knowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing attackers to read, create, overwrite and delete files outside the project directory. Attackers can supply path arguments containing directory traversal sequences to access arbitrary Markdown files accessible to the server process.

Signals

as the pipeline stamped them

High: High-risk vulnerability — CVSS 8.8

CVE

KEV from CISA · EPSS from FIRST

CVE ids in this dispatch with their KEV status and EPSS score
Id	KEV	EPSS	Reference
CVE-2026-86439	—	1%	NVD ↗

Get the next one first.

Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.

Follow on Telegram KEV RSS API

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.