CVE-2026-19046
NocteDefensor LudusMCP ludus_environment_guides_search ludusEnvironmentGuidesSearch.ts path traversal
CVSS Score
3.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The impacted element is an unknown function of the file src/tools/ludusEnvironmentGuidesSearch.ts of the component ludus_environment_guides_search. Such manipulation of the argument guide_name leads to path traversal. Local access is required to approach this attack. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-22 |
| Vendor | noctedefensor |
| Product | ludusmcp |
| Published | Aug 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for noctedefensor ludusmcp
Be the first to know when new low vulnerabilities affecting noctedefensor ludusmcp are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
NocteDefensor / LudusMCP
1.0.0 1.0.1 1.0.2 1.0.3 1.0.4 1.0.5 1.0.6 1.0.7 1.0.8 1.0.9 1.0.10 1.0.11 1.0.12 1.0.13 1.0.14 1.0.15 1.0.16 1.0.17 1.0.18 1.0.19 1.0.20 1.0.21 1.0.22 1.0.23 1.0.24
References
vuldb.com: https://vuldb.com/vuln/386493 vuldb.com: https://vuldb.com/vuln/386493/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19046 vuldb.com: https://vuldb.com/submit/863834 github.com: https://github.com/gongyanyugyy/public_exp/issues/5 github.com: https://github.com/NocteDefensor/LudusMCP/issues/4 github.com: https://github.com/NocteDefensor/LudusMCP/
Credits
🔍 gongyanyu (VulDB User) VulDB CNA Team