Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_creds_range_config. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricted to local execution. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-19366 A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_… https://www.cve.org/CVERecord?id=CVE-2026-19366
Post summary
The text announces the discovery of CVE-2026-19366 in NocteDefensor LudusMCP, specifying the affected file but providing no additional technical, exploit, or mitigation details.
🚨*CVE* CVE-2026-19366 A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_… https://www.cve.org/CVERecord?id=CVE-2026-19366 ----- Traducción: CVE-2026-19366 Se … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑19366 in NocteDefensor LudusMCP with a file reference but lacks technical, exploit, or mitigation specifics.