CVE-2026-57441
Received Received - Intake

Path Traversal Bypass in MCPVault

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: GitHub, Inc.

Description
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem-equivalent segment names. On case-insensitive macOS and Windows filesystems, case variants of .git, .obsidian, or node_modules pass both isAllowed() and isAllowedForListing() even though the operating system opens the restricted directory, and Windows trailing dots or spaces provide the same bypass. An attacker who influences a path selected by an AI agent can use the bypass in read, write, move, search, or listing operations to expose or modify sensitive repository and Obsidian metadata. Vault-root .. containment is not affected. This issue is fixed in version 0.11.4.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-57441
EUVD
EUVD-2026-79125

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mcpvault mcpvault 0.11.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-41 The product is vulnerable to file system contents disclosure through path equivalence. Path equivalence involves the use of special characters in file and directory names. The associated manipulations are intended to generate multiple names for the same object.
CWE-178 The product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

MCPVault before version 0.11.4 has a case-sensitivity flaw in its PathFilter component. It checks restricted directory patterns without normalizing paths or accounting for filesystem quirks. On macOS and Windows, which are case-insensitive, attackers can bypass restrictions using variations like .GIT or .OBSIDIAN. Windows also allows bypasses with trailing dots or spaces in paths. This lets attackers access or modify sensitive files via read, write, move, search, or listing operations.

Detection Guidance

The vulnerability affects MCPVault versions prior to 0.11.4. To detect it, check the installed version of MCPVault by running commands like 'npm list -g mcpvault' or 'mcpvault --version'. If the version is below 0.11.4, the system is vulnerable.

Impact Analysis

If you use MCPVault before 0.11.4, an attacker who controls a path selection could access sensitive files in your Obsidian vault. This includes repository data and metadata. The impact ranges from unauthorized file exposure to modification of critical vault contents, potentially compromising your private notes or configurations.

Mitigation Strategies

Upgrade MCPVault to version 0.11.4 or later immediately. This can be done using commands like 'npm install -g mcpvault@latest' or by following the official update instructions for your installation method.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-57441. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart