Description
A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. The manipulation of the argument workspacePath leads to path traversal. The attack needs to be performed locally. Upgrading to version 0.1.1 is recommended to address this issue. The identifier of the patch is 855b46739e0f6e8388f17f9d0066ac4298a3965d. Upgrading the affected component is recommended.
Published: 2026-08-09
Score: 4.8 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The bug resides in the installer module of the skill‑ninja‑mcp‑server. By supplying a maliciously crafted workspacePath argument, an attacker can cause the application to read or write files outside the intended directory. The flaw can lead to unauthorized access to system files or modification of sensitive configuration files. The weakness is a classic path traversal (CWE‑22) and is limited to local execution; it cannot be triggered remotely over the network.

Affected Systems

Products affected are aktsmm skill‑ninja‑mcp‑server version 0.1.0. The fix is available in 0.1.1, which includes the patch with commit identifier 855b46739e0f6e8388f17f9d0066ac4298a3965d.

Risk and Exploitability

The CVSS score of 4.8 places the issue in the medium severity range. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. Because the exploit requires local access, the likelihood of successful exploitation in most environments is low, but any system running the vulnerable version with local user privileges is at risk.

Generated by OpenCVE AI on August 9, 2026 at 04:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to aktsmm skill‑ninja‑mcp‑server version 0.1.1 or apply the patch commit 855b46739e0f6e8388f17f9d0066ac4298a3965d to eliminate the path traversal flaw.
  • If upgrading is not immediately possible, limit the use of the installer functions to a trusted user context and verify that workspacePath values are strictly scoped to the intended directory.
  • Run the application with the least privilege principle and monitor file access events to detect any attempts to traverse directories outside the allowed path.

Generated by OpenCVE AI on August 9, 2026 at 04:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 09 Aug 2026 03:15:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. The manipulation of the argument workspacePath leads to path traversal. The attack needs to be performed locally. Upgrading to version 0.1.1 is recommended to address this issue. The identifier of the patch is 855b46739e0f6e8388f17f9d0066ac4298a3965d. Upgrading the affected component is recommended.
Title aktsmm skill-ninja-mcp-server installer.ts uninstallSkill path traversal
First Time appeared Aktsmm
Aktsmm skill-ninja-mcp-server
Weaknesses CWE-22
CPEs cpe:2.3:a:aktsmm:skill-ninja-mcp-server:*:*:*:*:*:*:*:*
Vendors & Products Aktsmm
Aktsmm skill-ninja-mcp-server
References
Metrics cvssV2_0

{'score': 4.3, 'vector': 'AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 4.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Aktsmm Skill-ninja-mcp-server
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-09T02:45:10.898Z

Reserved: 2026-08-08T09:29:52.930Z

Link: CVE-2026-19328

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-09T04:30:03Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')