Approved changes feed: RSS · Atom

cpe:2.3:a:elinsky:execution-system-mcp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorElinsky (49939fe9-b33e-520f-9752-78d5d9653a27)
ProductExecution System Mcp (45e76ea9-0c8a-58a6-8c6c-26ef22368ca6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7319 vulnerable 2026-06-08 08:08:57.016460 elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal
HIGH (7.3)
A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function _get_context_file_path of the file src/execution_system_mcp/server.py of the component add_action Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used.
Published: 2026-04-28T21:00:18.252Z
Updated: 2026-04-30T12:59:07.534Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.