Skip to content
OpenAdvisories

Vendor

roomi-fields

1 known vulnerabilities.

Products

notebooklm-mcp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-61647

    @roomi-fields/notebooklm-mcp has path traversal in vault.batch tool that allows arbitrary file write outside intended vault directory

    NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generated content to local vault directories. Versions 1.6.0 through 2.0.2 contain a path traversal vulnerability in the `POST /batch-to-vault` endpoint, als…

    roomi-fields notebooklm-mcp @roomi-fields/notebooklm-mcp npm