CVE-2026-19365: Ichigo3766 image-gen-mcp upscale_images index.ts path traversal
A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscaleimages. Such manipulation of the argument outputpath leads to path traversal. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19365?
The severity of CVE-2026-19365 is rated as medium with a score of 5.3.
How do I fix CVE-2026-19365?
To fix CVE-2026-19365, ensure proper validation of the output_path argument to prevent path traversal.
Who is affected by CVE-2026-19365?
CVE-2026-19365 affects users of Ichigo3766 image-gen-mcp version 0.1.0 that utilize the upscale_images component.
What type of vulnerability is CVE-2026-19365?
CVE-2026-19365 is classified as a path traversal vulnerability.
What conditions are necessary for CVE-2026-19365 to be exploited?
CVE-2026-19365 can be exploited locally by manipulating the output_path argument.