Description
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| automateyournetwork | MCPyATS | 0.1.0, 0.1.1, 0.1.2, 0.1.3, 0.1.4 | — |
References
- VDB-387174 | automateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal vdb-entry technical-description
- VDB-387174 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- CVE-2026-19338 | CVE Analysis and Report third-party-advisory
- Submit #865262 | automateyournetwork MCPyATS 0.1.4 Path Traversal third-party-advisory
- https://github.com/automateyournetwork/MCPyATS/issues/22 issue-tracking
- https://github.com/automateyournetwork/MCPyATS/ product