p PatchFirst

CVE-2026-7212

CVE-2026-7212 · edvardlindelof notes-mcp notes_mcp.py path traversal

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of the file notes_mcp.py. The manipulation of the argument root_dir/path leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 6.9 · Medium · EPSS 0.4%

Published
Updated

Stack: python

Affected products and versions

  • notes-mcp

    Versions
    • 0.1.0: Affected
    • 0.1.1: Affected
    • 0.1.2: Affected
    • 0.1.3: Affected
    • 0.1.4: Affected

    No fix published

  • notes-mcp PyPI

    Versions
    • 0.1.0
    • 0.1.1
    • 0.1.2
    • 0.1.3
    • 0.1.4
    Affected ranges
    • ECOSYSTEM: ≤ 0.1.4

    No fix published

Original sources

Check your server →