Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_system_json/create_library to get_system_json/switch_memory_library of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-08 | 1 | PoC1 |
| 2026-08-09 | 1 | General1 |
CVE-2026-19330 A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_system_json/create_library to get_system_json/s… https://www.cve.org/CVERecord?id=CVE-2026-19330
Post summary
The tweet announces CVE‑2026‑19330 and names the impacted functions, but provides no PoC, exploit, or mitigation details.
🧠 Advanced Reasoning MCP hit by path traversal CVE-2026-19330 affects advanced-reasoning-mcp 1.0.0. Multiple memory-library functions can process paths unsafely, allowing traversal outside their intended directory. ⚠️ A proof-of-concept has been published. 🔎 Source: VulDB. #MCP #AISecurity #PathTraversal #CyberSecurity #CVE
Post summary
This post announces CVE-2026-19330, a path‑traversal flaw in advanced‑reasoning‑mcp, and notes the publication of a proof‑of‑concept, but provides no evidence of exploitation, patch, or mitigation.