medium5.3
CVE-2026-19338
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4.
Impact
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.
Affected products
| Product | Affected versions |
|---|---|
| Automateyournetwork MCPyATS | before 0.1.4. |
Versions were read from the advisory text. No structured product data has been published for this record yet.