CVE-2026-54561
Received Received - Intake

Path Traversal in MCP Memory Keeper

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: GitHub, Inc.

Description
MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_import in src/index.ts passes the caller-controlled filePath directly to fs.readFileSync without restricting the path to an export directory. An MCP client, including an LLM agent induced to call the tool, can use ../ traversal or an absolute path to target any file readable by the server process. A valid JSON file is parsed and imported into the caller's session, allowing its full contents to be retrieved through context_get or context_export, while JSON.parse errors for non-JSON files can return leading file bytes in a SyntaxError message. The two disclosure modes can expose other exported sessions, JSON credentials or service-account files, environment files, and portions of SSH keys or other local files. This issue is fixed in version 0.13.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-54561
EUVD
EUVD-2026-78828

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mcp memory_keeper 0.13.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-209 The product generates an error message that includes sensitive information about its environment, users, or associated data.
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in MCP Memory Keeper (versions prior to 0.13.0) allows an attacker to read arbitrary files on the server system through the context_import function. The function accepts a filePath parameter without validation and passes it directly to fs.readFileSync, enabling path traversal attacks using ../ or absolute paths. Attackers can access sensitive files like JSON credentials, session exports, .env files, SSH keys, or /etc/passwd. JSON files are fully disclosed while non-JSON files leak partial content via error messages.

Detection Guidance

Check if you are running mcp-memory-keeper version prior to 0.13.0. Inspect server logs for suspicious context_import calls with path traversal attempts like ../ or absolute paths. Test by attempting to import files outside the exports directory using commands like curl or direct MCP client calls.

Impact Analysis

This vulnerability could allow unauthorized access to sensitive files on your system if you are running a vulnerable version of MCP Memory Keeper. Attackers could steal credentials, session data, environment variables, or other confidential information. The impact includes potential data breaches, unauthorized system access, and exposure of internal configurations. The vulnerability requires an attacker to have access to an MCP client or be able to inject prompts into an LLM agent using the tool.

Compliance Impact

This vulnerability could lead to violations of GDPR, HIPAA, and other regulations by exposing personal data, health information, or other sensitive data. Unauthorized access to files containing such data may result in non-compliance with data protection requirements, leading to legal penalties, reputational damage, and loss of trust. Organizations using vulnerable versions must upgrade to mitigate compliance risks.

Mitigation Strategies

Upgrade mcp-memory-keeper to version 0.13.0 or later immediately. Ensure no sensitive files are stored in the exports directory. Review and restrict access to the server process. Monitor for any unusual file access patterns or data exfiltration attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-54561. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart