Description
A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshot_element Tool. Such manipulation of the argument output_name leads to path traversal. The attack can be executed remotely. Upgrading to version 1.1.1 is capable of addressing this issue. The name of the patch is 1102172c9adec4a619e241efd6bfb74f5b1f4332. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Published: 2026-08-06
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw resides in the screenshotElement function located in src/index.ts of MonomythDevelopment's la-forge-mcp component. By manipulating the output_name argument, a remote attacker can trigger a path traversal that enables writing or reading files outside the allotted directory. This could lead to disclosure of sensitive data, tampering with files, or executing arbitrary code depending on file permissions.

Affected Systems

MonomythDevelopment's la-forge-mcp component, version 1.0.0, is affected. The issue is fixed in version 1.1.1. The patch commit identifier is 1102172c9adec4a619e241efd6bfb74f5b1f4332.

Risk and Exploitability

The CVSS score is 5.3, indicating a medium impact. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote, and the exploit requires sending a crafted screenshotElement request with a manipulated output_name to achieve path traversal. No publicly known exploit is reported, but the medium CVSS score and remote nature suggest a notable risk for exposed deployments.

Generated by OpenCVE AI on August 6, 2026 at 14:36 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade la-forge-mcp to version 1.1.1 or later, which includes the patch commit 1102172c9adec4a619e241efd6bfb74f5b1f4332.
  • After upgrading, verify that the screenshotElement endpoint can no longer accept arbitrary output_name values that escape the intended directory.
  • If upgrading is not immediately possible, restrict access to the screenshotElement function or enforce strict validation on the output_name parameter to prevent directory traversal.

Generated by OpenCVE AI on August 6, 2026 at 14:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 06 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 06 Aug 2026 13:15:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshot_element Tool. Such manipulation of the argument output_name leads to path traversal. The attack can be executed remotely. Upgrading to version 1.1.1 is capable of addressing this issue. The name of the patch is 1102172c9adec4a619e241efd6bfb74f5b1f4332. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Title MonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversal
First Time appeared Monomythdevelopment
Monomythdevelopment la-forge-mcp
Weaknesses CWE-22
CPEs cpe:2.3:a:monomythdevelopment:la-forge-mcp:*:*:*:*:*:*:*:*
Vendors & Products Monomythdevelopment
Monomythdevelopment la-forge-mcp
References
Metrics cvssV2_0

{'score': 6.5, 'vector': 'AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Monomythdevelopment La-forge-mcp
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-06T15:09:44.229Z

Reserved: 2026-08-06T05:53:43.123Z

Link: CVE-2026-19038

cve-icon Vulnrichment

Updated: 2026-08-06T14:10:16.111Z

cve-icon NVD

Status : Deferred

Published: 2026-08-06T13:17:27.803

Modified: 2026-08-12T21:00:37.147

Link: CVE-2026-19038

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-07T10:00:56Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')