Skip to content
Threat Feed
Subscribe

Product

With-Context-Mcp (<= 3.0.7)

1 brief RSS
high threat

Path Traversal Vulnerability in with-context-mcp

A publicly disclosed path traversal vulnerability (CVE-2026-81491) in boxpositron with-context-mcp versions 3.0.7 and earlier allows remote attackers to manipulate file paths via specific ingested note functions.

exploited with-context-mcp path-traversal vulnerability remote-code-execution
1t 1c