Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-19338 EUVD-2026-54907GHSA-q9qj-38cq-3792

automateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal

Published Aug 9, 2026 · Updated Aug 10, 2026 · Assigned by VulDB

Description

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.

Affected products

VendorProductAffectedFixed
automateyournetwork MCPyATS 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4 —

References