Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-08 | 1 | General1 |
| 2026-08-09 | 2 | Disclosure2 |
Some increased actor activities are shown targeting automateyournetwork MCPyATS (CVE-2026-19338) https://vuldb.com/vuln/387174/cti
Post summary
The post notes increased actor activity targeting the MCPyATS module (CVE-2026‑19338) but provides no PoC, exploit details, patch information, or technical depth.
🚨*CVE* CVE-2026-19338 A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid… https://www.cve.org/CVERecord?id=CVE-2026-19338 ----- Traducción: CVE-2026-19338 Se … http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-19338, a vulnerability in automateyournetwork MCPyATS up to 0.1.4 affecting the processGenerateRequest function, without indicating a PoC, exploit, patch, or active exploitation.
CVE-2026-19338 A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid… https://www.cve.org/CVERecord?id=CVE-2026-19338
Post summary
The post announces CVE-2026-19338, noting a bug in automateyournetwork’s MCPyATS up to version 0.1.4, affecting the processGenerateRequest function in mcp_servers/mermaid, but provides no PoC, exploit, patch details, or evidence of active exploitation.