Description
A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathAllowed of the file src/Markdownify.ts. Executing a manipulation can lead to symlink following. The attack can only be executed locally. The pull request to fix this issue awaits acceptance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zcaceres | markdownify-mcp | 1.0, 1.1.0 | — |
References
- VDB-376295 | zcaceres markdownify-mcp Markdownify.ts assertPathAllowed symlink vdb-entry technical-description
- VDB-376295 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-14699 | CVE Analysis and Report third-party-advisory
- Submit #846864 | zcaceres markdownify-mcp / mcp-markdownify-server up to 1.1.0 CWE-59: Improper Link Resolution Before File Access ('Link Follo third-party-advisory
- https://github.com/zcaceres/markdownify-mcp/issues/108 issue-tracking
- https://github.com/zcaceres/markdownify-mcp/pull/109 issue-tracking patch
- https://github.com/zcaceres/markdownify-mcp/ product