dexhunter vulnerabilities

Products

• kaggle-mcp 1

Latest dexhunter CVEs

Newest publication first

1. CVE-2026-7149 dexhunter kaggle-mcp server.py prepare_kaggle_dataset path traversal

   Published 2026-04-27

   Medium·CVSS 6.9 EPSS 0.41%

   A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d. This vulnerability affects the function prepare_kaggle_dataset of the file src/kaggle_mcp/server.py. The manipulation of the argument competition_id leads to path traversal. The...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.