Description
A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown processing of the file kicad_mcp/utils/path_validator.py. Performing a manipulation of the argument project_path/schematic_path results in protection mechanism failure. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| lamaalrajih | kicad-mcp | 3.3.0, 3.3.1 | — |
References
- VDB-377866 | lamaalrajih kicad-mcp path_validator.py protection mechanism vdb-entry technical-description
- VDB-377866 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-15528 | CVE Analysis and Report third-party-advisory
- Submit #854531 | lamaalrajih kicad-mcp 3.3.1 Information Disclosure third-party-advisory
- https://github.com/lamaalrajih/kicad-mcp/issues/57 exploit issue-tracking
- https://github.com/lamaalrajih/kicad-mcp/ product