Medium severity5.3NVD Advisory· Published Aug 9, 2026

CVE-2026-19330

Description

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_system_json/create_library to get_system_json/switch_memory_library of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was informed of the problem early through an issue report but has not responded yet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Angrysky56/advanced-reasoning-mcpllm-create
Range: =1.0.0

Patches

Vulnerability mechanics

References

github.com/angrysky56/advanced-reasoning-mcp/issues/3nvd
vuldb.com/cve/CVE-2026-19330nvd
vuldb.com/submit/865248nvd
vuldb.com/vuln/387164nvd
vuldb.com/vuln/387164/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000