Description
A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes/sync_notes/project_folder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-08-27
Score: 6.9 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability arises in the ingest_notes, teleport_notes, and sync_notes functions, allowing a supplied project_folder value to bypass sanitization and traverse directories. This flaw can lead to arbitrary file read or write relative to the application's base directory, enabling an attacker to access or modify sensitive data. The CVSS score of 6.9 reflects moderate to high risk, and the issue is classified as CWE-22.

Affected Systems

The affected product is boxpositron with-context-mcp, specifically versions up to and including 3.0.7. No later releases are known to be impacted.

Risk and Exploitability

The flaw can be exploited remotely by delivering a crafted request that includes a malicious project_folder path. An exploit has already been published and may currently be used. While the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the combination of a CVSS of 6.9 and the ease of remote exploitation suggests a significant risk for systems that remain unpatched.

Generated by OpenCVE AI on August 27, 2026 at 05:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to a version of with-context-mcp that contains the fix, for example 3.0.8 or newer.
  • If upgrading cannot be performed immediately, implement input validation that ensures project_folder resolves only to authorized directories, rejecting any attempt to traverse directories outside the intended base path.
  • Add an access control layer or firewall rule to limit exposure of the ingest, teleport, and sync endpoints to trusted networks or authenticated users.
  • Monitor application logs for anomalous attempts to access files outside the designated project directory and investigate any such events promptly.

Generated by OpenCVE AI on August 27, 2026 at 05:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 04:00:00 +0000

Type Values Removed Values Added
Description A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest_notes/teleport_notes/sync_notes/project_folder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Title boxpositron with-context-mcp index.ts project_folder path traversal
First Time appeared Boxpositron
Boxpositron with-context-mcp
Weaknesses CWE-22
CPEs cpe:2.3:a:boxpositron:with-context-mcp:*:*:*:*:*:*:*:*
Vendors & Products Boxpositron
Boxpositron with-context-mcp
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Boxpositron With-context-mcp
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-27T02:15:09.570Z

Reserved: 2026-08-26T20:55:19.882Z

Link: CVE-2026-81491

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-27T04:17:59.853

Modified: 2026-08-27T04:17:59.853

Link: CVE-2026-81491

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-27T05:30:07Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')