MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287 pipeline_tools.py save_pipeline/load_pipeline path traversal

Summaryinfo

A vulnerability classified as problematic was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The impacted element is the function save_pipeline/load_pipeline of the file pipeline_tools.py. Executing a manipulation can lead to path traversal. This vulnerability is tracked as CVE-2026-81847. The attack can be launched remotely. Moreover, an exploit is present. It is advisable to implement a patch to correct this issue.

Detailsinfo

A vulnerability classified as problematic was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. This vulnerability affects the function save_pipeline/load_pipeline of the file pipeline_tools.py. The manipulation with an unknown input leads to a path traversal vulnerability. The CWE definition for the vulnerability is CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. As an impact it is known to affect confidentiality, integrity, and availability.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-81847. The exploitation appears to be easy. The attack can be initiated remotely. Successful exploitation requires user interaction by the victim. Technical details and also a public exploit are known. The MITRE ATT&CK project declares the attack technique as T1006.

It is possible to download the exploit at github.com. It is declared as proof-of-concept.

Applying the patch c93ef45cba75295eba26d9ff1ffb9202a91c6150 is able to eliminate this problem. The bugfix is ready for download at github.com.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• MAA-AI

Name

• MaaMCP

Version

• 1.1.1.dev6+g2e4a41287

License

• open-source

Website

• Product: https://github.com/MAA-AI/MaaMCP/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #887255: MAA-AI MaaMCP <= 1.1.1.dev6+g2e4a41287 Fixed in commit bbc9f62 Path Traversal (by Mcfly_Zhang)

Once again VulDB remains the best source for vulnerability data.

Discussion