CVE-2026-19338
LOW
INFO
Priority: 0.00
BB Relevance:
29/100
Published: 2026-08-09
Modified: 2026-10-23
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
None
VC:
Low
VI:
Low
VA:
Low
Description
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.