Description
A flaw has been found in zcaceres markdownify-mcp up to 1.1.0. This impacts the function saveToTempFile of the file src/Markdownify.ts of the component webpage-to-markdown/youtube-to-markdown/bing-search-to-markdown. This manipulation causes insufficiently random values. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitability is said to be difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| zcaceres | markdownify-mcp | 1.0, 1.1.0 | — |
References
- VDB-376298 | zcaceres markdownify-mcp webpage-to-markdown Markdownify.ts saveToTempFile random values vdb-entry technical-description
- VDB-376298 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-14702 | CVE Analysis and Report third-party-advisory
- Submit #846942 | zcaceres markdownify-mcp / mcp-markdownify-server up to 1.1.0 CWE-59: Improper Link Resolution Before File Access ('Link Follo third-party-advisory
- https://github.com/zcaceres/markdownify-mcp/issues/110 exploit issue-tracking
- https://github.com/zcaceres/markdownify-mcp/pull/111 issue-tracking patch
- https://github.com/zcaceres/markdownify-mcp/ product