CVE-2026-19366

MEDIUM

CVE: CVE-2026-19366 - A flaw has been found in NocteDefensor LudusMCP up to 1Sign in to save

CVSS

5.3

CVSS v3.1

EPSS

0.1%

Exploit Prediction Score

Published

August 9, 2026

Exploitability

EPSS probability 0.1%

Description

A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_creds_range_config. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricted to local execution. The project was informed of the problem early through an issue report but has not responded yet.

Weaknesses

CWE-22

Affected Packages

No package data available.

Aliases

CVE-2026-19366

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/NocteDefensor/LudusMCP/
https://github.com/NocteDefensor/LudusMCP/issues/5
https://vuldb.com/cve/CVE-2026-19366
https://vuldb.com/submit/866262
https://vuldb.com/vuln/387233
https://vuldb.com/vuln/387233/cti