CVE-2026-19285

MEDIUM 5.3

aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path traversal

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-22
Vendor	aaronsb
Product	memory-graph
Published	Aug 8, 2026

Stay Ahead of the Next One

Get instant alerts for aaronsb memory-graph

Be the first to know when new medium vulnerabilities affecting aaronsb memory-graph are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

aaronsb / memory-graph

5cfd2382778837b9f6399080956eee670d00452c

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/387025 vuldb.com: https://vuldb.com/vuln/387025/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19285 vuldb.com: https://vuldb.com/submit/865228 github.com: https://github.com/aaronsb/memory-graph/issues/14 github.com: https://github.com/aaronsb/memory-graph/

Credits

🔍 gongyanyu02 (VulDB User) VulDB CNA Team