CVE-2026-9468
Deferred Deferred - Pending Action
Path Traversal in dazeb cline-mcp-memory-bank

Publication date: 2026-05-25

Last updated on: 2026-05-25

Assigner: VulDB

Description
A security flaw has been discovered in dazeb cline-mcp-memory-bank up to 55c81b9cf6c16700983c84dc4cdea3cafa19a75f. The affected element is the function handleInitializeMemoryBank of the file src/index.ts. The manipulation of the argument projectPath results in path traversal. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-25
Last Modified
2026-05-25
Generated
2026-06-15
AI Q&A
2026-05-26
EPSS Evaluated
2026-06-14
NVD
CVE-2026-9468
EUVD
EUVD-2026-31699
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
dazeb cline-mcp-memory-bank to 55c81b9cf6c16700983c84dc4cdea3cafa19a75f (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a security flaw in the dazeb cline-mcp-memory-bank software, specifically in the function handleInitializeMemoryBank within the src/index.ts file. It involves improper handling of the argument projectPath, which allows an attacker to perform a path traversal attack. This means an attacker can manipulate the file path input to access files and directories outside the intended scope. The attack can be executed remotely, and the exploit code has been publicly released.

Impact Analysis

The vulnerability can allow an attacker to access unauthorized files or directories on the system where the software is running by exploiting the path traversal flaw. This could lead to exposure of sensitive information, modification of files, or other malicious activities depending on the system's configuration and the attacker's intent.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-9468. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart