CVE-2026-19338

MEDIUM

CVE: CVE-2026-19338 - A vulnerability was identified in automateyournetwork MCPyATS up to 0Sign in to save

CVSS

5.3

CVSS v3.1

EPSS

0.1%

Exploit Prediction Score

Published

August 9, 2026

Exploitability

EPSS probability 0.1%

Description

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.

Weaknesses

CWE-22

Affected Packages

No package data available.

Aliases

CVE-2026-19338

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/automateyournetwork/MCPyATS/
https://github.com/automateyournetwork/MCPyATS/issues/22
https://vuldb.com/cve/CVE-2026-19338
https://vuldb.com/submit/865262
https://vuldb.com/vuln/387174
https://vuldb.com/vuln/387174/cti