CVE-2026-81847

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-81847
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81847.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-81847
Published
2026-08-27T22:15:13.010Z
Modified
2026-08-30T03:30:24.531542292Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal
Details

A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function savepipeline/loadpipeline of the file pipeline_tools.py. Performing a manipulation results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named c93ef45cba75295eba26d9ff1ffb9202a91c6150. To fix this issue, it is recommended to deploy a patch.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81847.json",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "1.1.1.dev6+g2e4a41287"
                },
                {
                    "last_affected": "1.1.1.dev6+g2e4a41287"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-22"
    ],
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / github.com/zeeeepa/maamcp

Affected ranges

Type
GIT
Repo
https://github.com/zeeeepa/maamcp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
c93ef45cba75295eba26d9ff1ffb9202a91c6150
Database specific
Show details 
{
    "source": "REFERENCES"
}

Affected versions

v0.*
v0.0.1
v1.*
v1.0.0
v1.0.1
v1.0.2
v1.0.3
v1.1.0-beta.1
v1.1.0-beta.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81847.json"