PT-2026-35648 · Donchelo · Processing-Claude-Mcp-Bridge

Cpt_Penner · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7216

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions donchelo processing-claude-mcp-bridge versions up to e017b20a4b592a45531a6392f494007f04e661bd

Description A path traversal issue exists in the create sketch Tool within the processing server.py file. This occurs due to improper manipulation of the sketch name argument, allowing for remote exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-7216

Affected Products

Processing-Claude-Mcp-Bridge

References · 8

• 🔥 https://github.com/donchelo/processing-claude-mcp-bridge/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7216 · Security Note
• https://vuldb.com/vuln/359816/cti · Note
• https://github.com/donchelo/processing-claude-mcp-bridge · Note
• https://vuldb.com/vuln/359816 · Note
• https://t.me/CVEtracker/52032 · Telegram Post
• https://twitter.com/CVEarity/status/2049107948618780729 · Twitter Post
• https://vuldb.com/submit/802090 · Note