CVE-2026-19285

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-22

• https://github.com/aaronsb/memory-graph/
• https://github.com/aaronsb/memory-graph/issues/14
• https://vuldb.com/cve/CVE-2026-19285
• https://vuldb.com/submit/865228
• https://vuldb.com/vuln/387025
• https://vuldb.com/vuln/387025/cti
• https://github.com/aaronsb/memory-graph/issues/14

Published

Aug 8, 2026

Last Modified

Aug 14, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19279A vulnerability was identified in MIMICLab mcp-pdf-vision 1.…5.3
• CVE-2026-19280IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service…5.2
• CVE-2026-19281A security flaw has been discovered in adolfosalasgomez3011 …5.3
• CVE-2026-19282A weakness has been identified in andreahaku llm_memory_mcp …5.3
• CVE-2026-19283IBM Observability with Instana (Agent) Build 1.0.303 through…7.7
• CVE-2026-19284A security vulnerability has been detected in MauricioMilano…5.3
• CVE-2026-19286IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote a…9.8
• CVE-2026-19287A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Aff…5.3
• CVE-2026-19288A vulnerability has been found in astralisone rive-mcp-serve…5.3
• CVE-2026-1929The Advanced Woo Labels plugin for WordPress is vulnerable t…8.8
• CVE-2026-19290IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0…7.5
• CVE-2026-19291Bluetooth re-pairing with an existing device can use a lower…8.8