PT-2026-35648 · Donchelo · Processing-Claude-Mcp-Bridge

Cpt_Penner · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7216

Mitre

CVSS v3.1

7.3

High

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd. Impacted is an unknown function of the file processing server.py of the component create sketch Tool. This manipulation of the argument sketch name causes path traversal. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-7216

Affected Products

Processing-Claude-Mcp-Bridge

References · 6

• 🔥 https://github.com/donchelo/processing-claude-mcp-bridge/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7216 · Security Note
• https://vuldb.com/vuln/359816 · Note
• https://vuldb.com/vuln/359816/cti · Note
• https://github.com/donchelo/processing-claude-mcp-bridge · Note
• https://vuldb.com/submit/802090 · Note