CVE-2026-19285

A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c. Affected by this vulnerability is the function JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemoryStorage.saveMemories of the file src/tools/memoryTools.ts. The manipulation results in path traversal. The attack must be initiated from a local position. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-22

• https://github.com/aaronsb/memory-graph/
• https://github.com/aaronsb/memory-graph/issues/14
• https://vuldb.com/cve/CVE-2026-19285
• https://vuldb.com/submit/865228
• https://vuldb.com/vuln/387025
• https://vuldb.com/vuln/387025/cti

Published

Aug 8, 2026

Last Modified

Aug 8, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19270A security flaw has been discovered in Hulupeep mcp-ui-probe…5.3
• CVE-2026-19278A flaw was found in StackRox/RHACS Central's Auth Machine-to…6.8
• CVE-2026-19279A vulnerability was identified in MIMICLab mcp-pdf-vision 1.…5.3
• CVE-2026-19281A security flaw has been discovered in adolfosalasgomez3011 …5.3
• CVE-2026-19282A weakness has been identified in andreahaku llm_memory_mcp …5.3
• CVE-2026-19284A security vulnerability has been detected in MauricioMilano…5.3
• CVE-2026-19287A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Aff…5.3
• CVE-2026-19288A vulnerability has been found in astralisone rive-mcp-serve…5.3
• CVE-2026-1929The Advanced Woo Labels plugin for WordPress is vulnerable t…8.8
• CVE-2026-1930The Emailchef plugin for WordPress is vulnerable to unauthor…4.3
• CVE-2026-1931The Rent Fetch plugin for WordPress is vulnerable to Stored …7.2
• CVE-2026-1932The Appointment Booking Calendar Plugin – Bookr plugin for W…5.3