CVE-2026-19330: angrysky56 advanced-reasoning-mcp index.ts switch_memory_library path traversal
A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function createsystemjson/createlibrary to getsystemjson/switchmemorylibrary of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19330?
The severity of CVE-2026-19330 is medium with a score of 5.3.
How do I fix CVE-2026-19330?
To fix CVE-2026-19330, ensure that user input is properly sanitized to prevent path traversal in the create_system_json and create_library functions.
What type of vulnerability is CVE-2026-19330?
CVE-2026-19330 is classified as a path traversal vulnerability.
Is local access required to exploit CVE-2026-19330?
Yes, exploiting CVE-2026-19330 requires local access to the affected system.
Which components are affected by CVE-2026-19330?
The affected components in CVE-2026-19330 are the functions create_system_json and switch_memory_library in src/index.ts of angrysky56 advanced-reasoning-mcp.