CVE-2026-81845

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-81845

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81845.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-81845

Published

2026-08-27T21:45:10Z

Modified

2026-09-02T03:30:31Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

arben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal

Details

A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function import_session/export_session of the file mcp_sequential_thinking/server.py of the component Import Session/Export Session. Such manipulation of the argument file_path leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.6.0 is recommended to address this issue. The name of the patch is 2fad3ee8ab1d0868b6c1afb5895bc336a10e5267. Upgrading the affected component is recommended.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81845.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.1"
                },
                {
                    "last_affected": "0.1"
                },
                {
                    "introduced": "0.2"
                },
                {
                    "last_affected": "0.2"
                },
                {
                    "introduced": "0.3"
                },
                {
                    "last_affected": "0.3"
                },
                {
                    "introduced": "0.4"
                },
                {
                    "last_affected": "0.4"
                },
                {
                    "introduced": "0.5.0"
                },
                {
                    "last_affected": "0.5.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/arben-adm/mcp-sequential-thinking

Affected ranges

Type

GIT

Repo

https://github.com/arben-adm/mcp-sequential-thinking

Events

Introduced

Fixed

2fad3ee8ab1d0868b6c1afb5895bc336a10e5267

Fixed

bfac5643e35d7c4c2e3775d5c671ec969f15e3c2

Database specific

Show details

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81845.json"