CVE-2026-50757

Deferred Deferred - Pending Action

Directory Traversal in DayuanJiang next-ai-draw-io

Publication date: 2026-07-21

Last updated on: 2026-07-22

Assigner: MITRE

Description

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-22

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-50757

Affected Vendors & Products

Vendor	Product	Version / Range
dayuanjiang	next-ai-draw-io	0.4.13
dayuanjiang	next-ai-draw-io	to 0.4.13 (inc)
dayuanjiang	mcp-server	to 0.1.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

CVE-2026-50757 is a Directory Traversal vulnerability in the next-ai-draw-io 0.4.13 and its MCP server (versions <= 0.1.16). It allows remote attackers to write arbitrary files to any location on the filesystem by exploiting improper path validation in the export_diagram tool. The tool accepts a path parameter without sanitization, enabling path traversal sequences like ../../../etc/cron.d/job.

Detection Guidance

Check if the next-ai-draw-io MCP server (version <= 0.1.16) or next-ai-draw-io (version <= 0.4.13) is installed. Look for unusual file writes in system directories like /etc/cron.d/ or user home directories. Monitor network traffic for suspicious MCP tool calls to export_diagram with path parameters containing traversal sequences like ../../../.

Impact Analysis

This vulnerability can lead to system compromise, data theft, or persistence mechanisms. Attackers could write malicious files to critical system directories, execute arbitrary code, or maintain access through mechanisms like cron jobs. The MCP server runs with full filesystem permissions, making the impact severe.

Compliance Impact

This vulnerability could lead to unauthorized file writes, potentially exposing sensitive data stored on the system. For GDPR, this may result in violations of data protection principles if personal data is accessed or modified without authorization. Under HIPAA, it could compromise protected health information if the system processes such data, leading to breaches of confidentiality requirements.

Mitigation Strategies

Immediately update next-ai-draw-io to version > 0.4.13 and @next-ai-drawio/mcp-server to version > 0.1.16. Disable or restrict access to the export_diagram tool in the MCP server configuration. Implement strict input validation for all path parameters in the application. Review filesystem permissions to limit write access for the MCP server user.

Hi! I’m here to help you understand CVE-2026-50757. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70