CVE-2026-19338
automateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.
CVSS 4.0 · 4.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products