CVE-2026-81847

MEDIUM 5.5

MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save_pipeline/load_pipeline of the file pipeline_tools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named c93ef45cba75295eba26d9ff1ffb9202a91c6150. To fix this issue, it is recommended to deploy a patch.

CWE	CWE-22
Vendor	maa-ai
Product	maamcp
Published	Aug 27, 2026

Stay Ahead of the Next One

Get instant alerts for maa-ai maamcp

Be the first to know when new medium vulnerabilities affecting maa-ai maamcp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

MAA-AI / MaaMCP

1.1.1.dev6+g2e4a41287

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/396172 vuldb.com: https://vuldb.com/vuln/396172/cti vuldb.com: https://vuldb.com/cve/CVE-2026-81847 vuldb.com: https://vuldb.com/submit/887255 github.com: https://github.com/MAA-AI/MaaMCP/issues/31 github.com: https://github.com/MAA-AI/MaaMCP/issues/32 github.com: https://github.com/Zeeeepa/MaaMCP/commit/c93ef45cba75295eba26d9ff1ffb9202a91c6150 github.com: https://github.com/MAA-AI/MaaMCP/

Credits

🔍 Mcfly_Zhang (VulDB User)