The vulnerability resides in the handleInitializeMemoryBank function of src/index.ts. An attacker can manipulate the projectPath argument to perform a path traversal, enabling reading of arbitrary files or influencing code execution paths. The flaw permits remote exploitation and the public release of exploit code indicates it is actionable.

The affected product is dazeb’s cline-mcp‑memory‑bank. The known affected commit range extends up to the reference hash 55c81b9cf6c16700983c84dc4cdea3cafa19a75f. Because the project uses rolling releases, specific version numbers are not published, but any code prior to a fixed release remains vulnerable.

With a CVSS score of 5.3 the risk is moderate. The EPSS score is not available, and the vulnerability is not included in the CISA KEV list. The attack vector is remote; an internet‑facing instance that accepts projectPath values can be abused. The published exploit demonstrates practical feasibility, so systems should not wait for a future update before mitigating.