Description
A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_system_json/create_library to get_system_json/switch_memory_library of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| angrysky56 | advanced-reasoning-mcp | 1.0.0 | — |
References
- VDB-387164 | angrysky56 advanced-reasoning-mcp index.ts switch_memory_library path traversal vdb-entry technical-description
- VDB-387164 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-19330 | CVE Analysis and Report third-party-advisory
- Submit #865248 | angrysky56 advanced-reasoning-mcp unknown Path Traversal third-party-advisory
- https://github.com/angrysky56/advanced-reasoning-mcp/issues/3 issue-tracking
- https://github.com/angrysky56/advanced-reasoning-mcp/ product