Skip to content
OpenAdvisories

Vendor

bitbonsai

2 known vulnerabilities.

Products

mcpvault 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-57441

    MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence

    MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesyste…

    bitbonsai mcpvault @bitbonsai/mcpvault npm