aktsmm vulnerabilities

Products

• skill-ninja-mcp-server 1

Latest aktsmm CVEs

Newest publication first

1. CVE-2026-19328 aktsmm skill-ninja-mcp-server installer.ts uninstallSkill path traversal

   Published 2026-08-09

   Medium·CVSS 4.8 EPSS 0.17%

   A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill of the file src/installer.ts. The manipulation of the argument workspacePath leads to path traversal. The attack needs to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.