elinsky execution-system-mcp vulnerabilities

Latest elinsky execution-system-mcp CVEs

Newest publication first

1. CVE-2026-7319 elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal

   Published 2026-04-28

   Medium·CVSS 6.9 EPSS 0.53%

   A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function _get_context_file_path of the file src/execution_system_mcp/server.py of the component add_action Tool. This manipulation of the argument context causes path traversal. The attack ca...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.