CVE-2026-19330 in advanced-reasoning-mcp
Summary
by MITRE • 08/09/2026
A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_system_json/create_library to get_system_json/switch_memory_library of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was informed of the problem early through an issue report but has not responded yet.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 08/09/2026
The vulnerability identified in angrysky56 advanced-reasoning-mcp version 1.0.0 represents a critical path traversal flaw within the system's file handling mechanisms. This security weakness manifests specifically in the create_system_json, create_library, get_system_json, and switch_memory_library functions located within the src/index.ts file. The vulnerability enables unauthorized file system access through manipulation of input parameters that are not properly validated or sanitized before being used in file operations.
The technical implementation of this flaw occurs when user-supplied data is directly incorporated into file path constructions without adequate sanitization measures. This allows attackers with local access to manipulate the path traversal behavior by injecting malicious path components such as directory separators or symbolic links. The vulnerability operates at the application level where file system calls are made using potentially tainted input, creating opportunities for attackers to access files outside of intended directories.
From an operational perspective, this path traversal vulnerability presents significant risks to system integrity and data confidentiality. Attackers with local access can potentially read sensitive configuration files, access system logs, or even modify critical application components. The impact extends beyond simple information disclosure to potential privilege escalation scenarios where attackers might gain unauthorized access to system resources. The vulnerability's local access requirement means that it cannot be exploited remotely, but it still poses serious risks in environments where local system access is available to unauthorized users.
The security implications of this flaw align with CWE-23 (Relative Path Traversal) and CWE-73 (Path Traversal) classifications, which specifically address vulnerabilities related to improper input validation in file system operations. This vulnerability also maps to ATT&CK technique T1059.001 (Command and Scripting Interpreter: PowerShell) and T1566.001 (Phishing: Spearphishing Attachment) as attackers might leverage this weakness to establish persistence or escalate privileges through malicious file manipulation.
Mitigation strategies should focus on implementing robust input validation and sanitization for all file path operations. The system should employ absolute path resolution techniques, validate that input parameters fall within expected directory boundaries, and implement proper access controls for file system operations. Additionally, the application should be designed with principle of least privilege in mind, ensuring that file system operations are performed with minimal required permissions. Regular security audits and code reviews should be conducted to identify similar vulnerabilities in other file handling functions throughout the codebase.
The lack of response from the project maintainers following the initial issue report represents a critical gap in vulnerability management practices. This delay in addressing known security flaws increases the risk exposure for users and demonstrates inadequate security response procedures. Organizations deploying this software should implement immediate compensating controls including restricted local access permissions, monitoring for suspicious file system activity, and consideration of alternative implementations until proper security patches are released. The vulnerability highlights the importance of maintaining active communication channels with security researchers and implementing timely vulnerability remediation processes to protect deployed systems from exploitation.