Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function image_to_3d_async of the file src/index.ts of the component MCP Interface. The manipulation of the argument statusFile results in path traversal. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-01 | 2 | Disclosure2 |
| 2026-05-02 | 1 | General1 |
CVE-2026-7594 A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function image_to_3d_async of the file src/index.ts of the component MCP Interface. Th… https://www.cve.org/CVERecord?id=CVE-2026-7594
Post summary
A vulnerability affecting Flux159 mcp-game-asset-gen 0.1.0's image_to_3d_async function has been identified, with the details indicating a path to a CVE record but no exploit or mitigation disclosed.
CVE-2026-7594 Path Traversal in Flux159 mcp-game-asset-gen 0.1.0 MCP Interface https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7594
Post summary
The text references CVE-2026-7594 as a path traversal flaw in Flux159’s mcp-game-asset-gen and provides a link to a vulnerability details page, but offers no further technical depth, exploit availability, or remediation guidance.
🚨*CVE* CVE-2026-7594 A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function image_to_3d_async of the file src/index.ts of the component MCP Interface. Th… https://www.cve.org/CVERecord?id=CVE-2026-7594 ----- Traducción: CVE-2026-7594 Se … http://infoflow.cloud`
Post summary
The snippet announces CVE-2026-7594 in Flux159 mcp-game-asset-gen 0.1.0, specifying the impacted function, but provides no PoC, exploit code, or patch information.