PT-2026-35832 · Elinsky · Execution-System-Mcp

Littlew · Published 2026-04-28 · Updated 2026-04-28 · CVE-2026-7319

NVD

CVSS v2.0

7.5

High

AV:N/AC:L/Au:N/C:P/I:P/A:P

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function get context file path of the file src/execution system mcp/server.py of the component add action Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-7319

Affected Products

Execution-System-Mcp

References · 6

• 🔥 https://github.com/elinsky/execution-system-mcp/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7319 · Security Note
• https://github.com/elinsky/execution-system-mcp · Note
• https://vuldb.com/vuln/359972 · Note
• https://vuldb.com/submit/803085 · Note
• https://vuldb.com/vuln/359972/cti · Note