PT-2026-56694 · Tumf · Mcp-Text-Editor

Geochen · Published 2026-07-09 · Updated 2026-07-09 · CVE-2026-15138

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function validate file path of the file mcp text editor/text editor.py. Such manipulation of the argument file path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor closed the GitHub issue for this vulnerability without any explanation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-15138

Affected Products

Mcp-Text-Editor

References · 7

• 🔥 https://github.com/tumf/mcp-text-editor/issues/22 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-15138 · Security Note
• https://vuldb.com/vuln/376953/cti · Note
• https://github.com/tumf/mcp-text-editor · Note
• https://vuldb.com/submit/851188 · Note
• https://vuldb.com/cve/CVE-2026-15138 · Note
• https://vuldb.com/vuln/376953 · Note