CVE-2026-81485
Received Received - Intake

Path Traversal in LinkedIn Ads MCP

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: VulDB

Description
A security vulnerability has been detected in danielpopamd linkedin-ads-mcp 1.0.0. Affected by this vulnerability is the function fs.readFileSync of the file src/tools/campaign-management.ts of the component Media Upload. Such manipulation of the argument filePath leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-27
Last Modified
2026-08-27
Generated
2026-08-27
AI Q&A
2026-08-27
EPSS Evaluated
N/A
NVD
CVE-2026-81485
EUVD
EUVD-2026-66832

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
danielpopamd linkedin-ads-mcp 1.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a path traversal issue in the linkedin-ads-mcp tool version 1.0.0. The fs.readFileSync function in src/tools/campaign-management.ts reads a file specified by the filePath argument without proper validation. Attackers can manipulate this argument to read arbitrary files on the server system.

Detection Guidance

Check for unauthorized file reads in logs or unusual activity in the linkedin-ads-mcp tool. Inspect the src/tools/campaign-management.ts file for the fs.readFileSync usage at line 675 and src/lib/linkedin-api.ts at line 1118. Look for filePath arguments that may traverse directories or access sensitive files.

Impact Analysis

An attacker could exploit this to read sensitive files on the server, potentially exposing confidential data such as configuration files, credentials, or other sensitive information. The attack can be performed remotely if the attacker can invoke the MCP tool.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA compliance requirements. It may result in data breaches, unauthorized disclosure of protected health information, or other regulatory violations.

Mitigation Strategies

Disable the upload_image MCP tool if not required. Restrict filePath inputs to a specific allowlisted directory. Validate and normalize file paths to prevent traversal sequences. Implement authentication for MCP tool invocations. Monitor logs for suspicious file read attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81485. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart