tumf vulnerabilities

Products

• mcp-text-editor 1

Latest tumf CVEs

Newest publication first

1. CVE-2026-15138 tumf mcp-text-editor text_editor.py _validate_file_path path traversal

   Published 2026-07-09

   Medium·CVSS 5.3 EPSS 0.51%

   A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function _validate_file_path of the file mcp_text_editor/text_editor.py. Such manipulation of the argument file_path leads to path traversal. The attack can be launched remotely...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.