CVE-2026-82111

Deferred Deferred - Pending Action

Path Traversal in iswalle getnote-mcp

Publication date: 2026-08-28

Last updated on: 2026-08-31

Assigner: VulDB

Description

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component upload_image. Performing a manipulation of the argument image_path results in path traversal. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 1.5.1 is sufficient to fix this issue. The patch is named 7f9a215e03575c650d38c8f87fc6d8d363fed80d. Upgrading the affected component is advised.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-31

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-82111

EUVD

EUVD-2026-67588

Affected Vendors & Products

Vendor	Product	Version / Range
iswalle	getnote-mcp	to 1.5.0 (inc)
iswalle	getnote-mcp	1.5.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a path traversal issue in the iswalle getnote-mcp component up to version 1.5.0. It occurs in the function fs.readFileSync within the src/index.ts file, specifically in the upload_image component. An attacker can manipulate the image_path argument to perform path traversal, potentially accessing unauthorized files on the system.

Detection Guidance

Detecting this vulnerability requires checking if the affected component iswalle getnote-mcp up to version 1.5.0 is installed. Inspect the installed version of the component and verify if it is below 1.5.1. Check for unusual file access patterns or path traversal attempts in logs, particularly involving the upload_image component.

Impact Analysis

The vulnerability allows remote attackers to read sensitive files on the server where the affected component is running. This could lead to unauthorized data exposure, including configuration files, user data, or other sensitive information stored on the system.

Compliance Impact

This vulnerability could lead to non-compliance with data protection regulations like GDPR or HIPAA by exposing sensitive personal or health information. Unauthorized file access may result in data breaches, triggering legal penalties, fines, or reputational damage for organizations handling regulated data.

Mitigation Strategies

Immediately upgrade iswalle getnote-mcp to version 1.5.1 or later to patch the vulnerability. Remove or disable the affected component if upgrading is not feasible. Monitor network traffic for suspicious activity related to file access or path traversal attempts.

Hi! I’m here to help you understand CVE-2026-82111. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70