Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-19285 A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.… https://www.cve.org/CVERecord?id=CVE-2026-19285
Post summary
The statement merely reports the existence of CVE-2026-19285 affecting a specific function in a library, without providing additional technical details or evidence of exploitation.
🧠 Memory-graph project hit by path-traversal flaw CVE-2026-19285 affects the memory-graph project's JSON memory-storage functionality. Manipulation of storage parameters can cause path traversal, potentially allowing files to be accessed outside their intended location. The attack requires local access. 📅 Published: August 8 🔎 Source: CVE / Vulners. #AISecurity #MemoryGraph #PathTraversal #CVE #CyberSecurity
Post summary
CVE-2026-19285 is a local path‑traversal vulnerability in the memory‑graph project’s JSON storage, potentially exposing files beyond intended directories.
🚨*CVE* CVE-2026-19285 A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.… https://www.cve.org/CVERecord?id=CVE-2026-19285 ----- Traducción: CVE-2026-19285 Se … http://infoflow.cloud`
Post summary
The post announces CVE-2026-19285 and provides a link to its CVE.org entry, but offers no additional technical details, exploit code, or remediation guidance.