CVE-2026-19338 — automateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts o…
Published: 2026-08-09 · CVSS: 4.8 · CVSS 4.0
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7