Skip to content
OpenAdvisories

Vendor

AgiFlow

1 known vulnerabilities.

Products

scaffold-mcp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-7237

    AgiFlow scaffold-mcp write-to-file Tool index.ts path traversal

    A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27. Affected by this issue is some unknown functionality of the file packages/scaffold-mcp/src/server/index.ts of the component write-to-file Tool. The manipulation of the argument file_path resul…

    AgiFlow scaffold-mcp