CVE-2026-19046

LOW

CVE: CVE-2026-19046 - A security vulnerability has been detected in NocteDefensor LudusMCP up to 1Sign in to save

CVSS

3.3

CVSS v3.1

EPSS

0.1%

Exploit Prediction Score

Published

August 6, 2026

Exploitability

EPSS probability 0.1%

Description

A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The impacted element is an unknown function of the file src/tools/ludusEnvironmentGuidesSearch.ts of the component ludus_environment_guides_search. Such manipulation of the argument guide_name leads to path traversal. Local access is required to approach this attack. The project was informed of the problem early through an issue report but has not responded yet.

Weaknesses

CWE-22

Affected Packages

No package data available.

Aliases

CVE-2026-19046

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/NocteDefensor/LudusMCP/
https://github.com/NocteDefensor/LudusMCP/issues/4
https://github.com/gongyanyugyy/public_exp/issues/5
https://vuldb.com/cve/CVE-2026-19046
https://vuldb.com/submit/863834
https://vuldb.com/vuln/386493
https://vuldb.com/vuln/386493/cti