CVE-2026-19328 in skill-ninja-mcp-server
Summary
by MITRE • 08/09/2026
A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. The manipulation of the argument workspacePath leads to path traversal. The attack needs to be performed locally. Upgrading to version 0.1.1 is recommended to address this issue. The identifier of the patch is 855b46739e0f6e8388f17f9d0066ac4298a3965d. Upgrading the affected component is recommended.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 08/09/2026
This vulnerability resides within the aktsmm skill-ninja-mcp-server version 0.1.0, specifically targeting the file src/installer.ts where several critical functions operate including getInstalledSkills installSkill updateAgentsMd and uninstallSkill. The core issue manifests as a path traversal flaw that occurs when manipulating the workspacePath argument parameter. This type of vulnerability falls under the common weakness enumeration category CWE-23 which describes improper limitation of a pathname to a restricted directory known as path traversal or directory traversal attacks. The attack vector requires local execution meaning an attacker must already have access to the system to exploit this weakness.
The technical implementation of this flaw allows malicious actors with local access to manipulate the workspacePath parameter in such a way that they can traverse the file system beyond the intended directories. When these functions process user-controlled input without proper sanitization or validation, they become susceptible to path traversal attacks where an attacker can potentially access files outside the designated workspace boundaries. This creates a significant risk for unauthorized data access and potential system compromise.
The operational impact of this vulnerability extends beyond simple information disclosure as it could enable attackers to modify or delete critical system files through the installed skill management functions. Since the attack requires local execution, it typically means that an attacker already has some level of system access but the vulnerability essentially elevates their privileges within the context of the application. This path traversal weakness could allow for arbitrary code execution if the application has sufficient permissions to modify files in critical system locations. The affected functions work with skill installations and updates which makes them particularly dangerous as they operate with elevated privileges.
The recommended remediation involves upgrading to version 0.1.1 which contains the patch identified by commit hash 855b46739e0f6e8388f17f9d0066ac4298a3965d. This upgrade addresses the root cause of the path traversal vulnerability by implementing proper input validation and sanitization for the workspacePath parameter. The fix should be implemented as a priority since local privilege escalation through path traversal attacks can lead to complete system compromise, especially when combined with other vulnerabilities or when the application runs with elevated privileges. Organizations should also review their access controls to ensure that only authorized personnel have local access to systems running this software.
Security practitioners should consider this vulnerability in relation to the attack technique described in the attack tactic and technique framework where path traversal attacks are classified under T1059 Command and Scripting Interpreter and T1566 Impairing Defenses techniques. The vulnerability represents a classic example of how insufficient input validation can create serious security implications in software applications that handle file system operations. Regular security assessments should include verification that input parameters are properly validated to prevent similar issues from occurring in other components of the system architecture.