Pal Mcp Server
Approved changes feed: RSS · Atom
cpe:2.3:a:busymac:pal_mcp_server:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Busymac (7d210b36-e36a-5ff7-b6a0-5166d19361fe) |
|---|---|
| Product | Pal Mcp Server (91b0df79-5fe0-55ef-b33c-d48fb3db6920) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66689 |
vulnerable | 2026-06-08 07:41:19.456951 |
Details available
A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() validation function that uses exact string matching against a blacklist of system directories. Attackers can bypass these restrictions by accessing subdirectories of blacklisted paths.
Published: 2026-01-12T00:00:00.000Z
Updated: 2026-01-12T18:34:48.370Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.