Unrated severityNVD Advisory· Published Jul 21, 2026· Updated Jul 22, 2026

CVE-2026-50757

Description

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server

Affected products

Dayuanjiang/Next AI Draw.iollm-fuzzy
Range: <0.4.13

Patches

Vulnerability mechanics

References

github.com/August829/Yu/blob/main/CVE-2026-50757.mdmitre
github.com/DayuanJiang/next-ai-draw-io/issues/754mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000