PT-2026-24079 · Unknown · Jimeng-Web-Mcp

Published 2026-03-09 · Updated 2026-05-21 · CVE-2025-70040

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions LupinLin1 jimeng-web-mcp version 2.1.2

Description An issue exists where sensitive information is inserted into log files. This can allow an attacker to obtain sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-70040

Affected Products

Jimeng-Web-Mcp

References · 9

• https://osv.dev/vulnerability/CVE-2025-70040 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-70040 · Security Note
• https://github.com/LupinLin1/jimeng-web-mcp · Note
• https://github.com/LupinLin1 · Note
• https://twitter.com/CVEnew/status/2031137177187529165 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2031102884687864156 · Twitter Post
• https://t.me/cveNotify/164413 · Telegram Post
• https://gist.github.com/zcxlighthouse/73b4ea07d1056ca9f100d11bfb4c8aa5 · Note
• https://t.me/CVEtracker/46915 · Telegram Post