CVE-2026-94046

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-94046

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94046.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-94046

Published

2026-09-20T18:45:09Z

Modified

2026-09-22T03:45:54Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal

Details

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_snippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. isPathInsideProjectRoot only blocks filePath escaping the attacker-chosen projectRootPath; the root itself is untrusted client input - set projectRootPath=/etc, filePath=hosts and the guard passes. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-22"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/94xxx/CVE-2026-94046.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "4.10.0"
                },
                {
                    "last_affected":  "4.10.0"
                },
                {
                    "introduced":  "4.10.2"
                },
                {
                    "last_affected":  "4.10.2"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/0215andrewfeng/ace-mcp

Affected ranges

Type

GIT

Repo

https://github.com/0215andrewfeng/ace-mcp

Events

Introduced

9b22fde6894c31e69953f98e6b0bce57ad9dafb0

Last Affected

c91e7cd2e31f2c303b01eb9af3de4d15523abf3a

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "4.10.1"
        },
        {
            "last_affected":  "4.10.1"
        },
        {
            "introduced":  "4.10.3"
        },
        {
            "last_affected":  "4.10.3"
        },
        {
            "introduced":  "4.10.4"
        },
        {
            "last_affected":  "4.10.4"
        },
        {
            "introduced":  "4.10.5"
        },
        {
            "last_affected":  "4.10.5"
        },
        {
            "introduced":  "4.10.6"
        },
        {
            "last_affected":  "4.10.6"
        },
        {
            "introduced":  "4.10.7"
        },
        {
            "last_affected":  "4.10.7"
        },
        {
            "introduced":  "4.10.8"
        },
        {
            "last_affected":  "4.10.8"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

4.*

4.10.1

4.10.3

4.10.4

4.10.5

4.10.6

4.10.7

4.10.8

v4.*

v4.10.1

v4.10.3

v4.10.4

v4.10.5

v4.10.6

v4.10.7

v4.10.8

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-94046.json"