PT-2026-55763 · Unknown · Markdownify-Mcp

Dem0000000 · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14702

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions zcaceres markdownify-mcp versions prior to 1.1.1

Description A flaw exists in the saveToTempFile() function within the src/Markdownify.ts file of the webpage-to-markdown, youtube-to-markdown, and bing-search-to-markdown components. This issue results in the generation of insufficiently random values. Exploitation requires local execution and is characterized by high complexity and difficult exploitability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

CWE-310

Related Identifiers

CVE-2026-14702

Affected Products

Markdownify-Mcp

References · 10

• 🔥 https://github.com/zcaceres/markdownify-mcp/issues/110 · Exploit
• https://github.com/zcaceres/markdownify-mcp/pull/111 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-14702 · Security Note
• https://vuldb.com/submit/846942 · Note
• https://github.com/zcaceres/markdownify-mcp · Note
• https://vuldb.com/cve/CVE-2026-14702 · Note
• https://vuldb.com/vuln/376298 · Note
• https://twitter.com/infoflowcloud/status/2073657135070613643 · Twitter Post
• https://vuldb.com/vuln/376298/cti · Note
• https://twitter.com/CVEnew/status/2073655127647359094 · Twitter Post