CVE-2026-81485
danielpopamd linkedin-ads-mcp Media Upload campaign-management.ts fs.readFileSync path traversal
CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-22 |
| Vendor | danielpopamd |
| Product | linkedin-ads-mcp |
| Published | Aug 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for danielpopamd linkedin-ads-mcp
Be the first to know when new medium vulnerabilities affecting danielpopamd linkedin-ads-mcp are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
danielpopamd / linkedin-ads-mcp
1.0.0
References
vuldb.com: https://vuldb.com/vuln/395979 vuldb.com: https://vuldb.com/vuln/395979/cti vuldb.com: https://vuldb.com/cve/CVE-2026-81485 vuldb.com: https://vuldb.com/submit/887136 github.com: https://github.com/danielpopamd/linkedin-ads-mcp/issues/5 github.com: https://github.com/danielpopamd/linkedin-ads-mcp/
Credits
🔍 cccccccti (VulDB User) VulDB CNA Team