Skip to content
OpenAdvisories
Low · 3.3 CVE-2026-15528 EUVD-2026-43273GHSA-c7fc-wmwf-cvvh

lamaalrajih kicad-mcp path_validator.py protection mechanism

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by VulDB

Description

A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown processing of the file kicad_mcp/utils/path_validator.py. Performing a manipulation of the argument project_path/schematic_path results in protection mechanism failure. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

VendorProductAffectedFixed
lamaalrajih kicad-mcp 3.3.0, 3.3.1 —

References