CVE-2026-7404

getsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversal

View on CVE.org
Published Apr 29, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Description
A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function delete_shared_prompt of the file src/mcpo_simple_server/services/prompt_manager/base_manager.py. This manipulation of the argument detail causes relative path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Analysis

AI-generated

Technical impact

The delete_shared_prompt function in mcpo_simple_server allows an attacker to manipulate a detail argument, enabling relative path traversal that can result in arbitrary file access or deletion. This flaw can lead to data loss or the exposure of sensitive information. The weakness belongs to CWE-22 and CWE-23, which describe directory traversal vulnerabilities.

Affected Systems

getsimpletool mcpo-simple-server versions up to and including 0.2.0 are affected. Users running any 0.2.0 or earlier release are at risk until a fix is applied.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity, and the exploit is publicly available, allowing remote attackers to exercise this path traversal. EPSS data is not available, and it is not listed in CISA KEV, but the remote nature of the attack and the potential to delete or read arbitrary files means a real threat exists. Attackers would target the delete_shared_prompt endpoint over the network to craft malicious input that forces traversal.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest released version of mcpo-simple-server when it becomes available.
  • Restrict network access to the delete_shared_prompt endpoint or disable the endpoint if it is not needed for business operations.
  • Implement input validation to block path traversal before the detail argument is used in file operations.

Generated by OpenCVE AI on April 30, 2026 at 03:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-3jmq-qhg3-f58j mcpo-simple-server has a Path Traversal issue
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Getsimpletool
Getsimpletool mcpo-simple-server
Vendors & Products Getsimpletool
Getsimpletool mcpo-simple-server
Type Values Removed Values Added
Description A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function delete_shared_prompt of the file src/mcpo_simple_server/services/prompt_manager/base_manager.py. This manipulation of the argument detail causes relative path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Title getsimpletool mcpo-simple-server base_manager.py delete_shared_prompt path traversal
Weaknesses CWE-22
CWE-23
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

  • CWE-23

    Relative Path Traversal

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Apr 30, 2026, 12:24 PM
Reserved
Apr 29, 2026, 12:56 PM

View source JSON

Updated
Apr 30, 2026, 12:24 PM

JSON

Status
Deferred
Published
Apr 29, 2026, 9:16 PM
Modified
Oct 26, 2026, 8:10 PM

View source JSON

No data.

Updated
Apr 30, 2026, 8:20 AM

JSON