CVE-2026-54561

MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_import in src/index.ts passes the caller-controlled filePath directly to fs.readFileSync without restricting the path to an export directory. An MCP client, including an LLM agent induced to call the tool, can use ../ traversal or an absolute path to target any file readable by the server process. A valid JSON file is parsed and imported into the caller's session, allowing its full contents to be retrieved through context_get or context_export, while JSON.parse errors for non-JSON files can return leading file bytes in a SyntaxError message. The two disclosure modes can expose other exported sessions, JSON credentials or service-account files, environment files, and portions of SSH keys or other local files. This issue is fixed in version 0.13.0.

• CWE-22
• CWE-209

• https://github.com/mkreyman/mcp-memory-keeper/commit/58640c22e037572e0b03bc0aa25d015ea98dcc6d
• https://github.com/mkreyman/mcp-memory-keeper/commit/b9369568468007c85f8aec3ae09ca6f611285bc5
• https://github.com/mkreyman/mcp-memory-keeper/commit/e0ab521a9e8343bcab1ca60ccc3601e4d86eaa97
• https://github.com/mkreyman/mcp-memory-keeper/issues/35
• https://github.com/mkreyman/mcp-memory-keeper/pull/36
• https://github.com/mkreyman/mcp-memory-keeper/releases/tag/v0.13.0
• https://github.com/mkreyman/mcp-memory-keeper/security/advisories/GHSA-f7wf-v2vw-mpcx
• https://github.com/mkreyman/mcp-memory-keeper/issues/35

Published

Sep 15, 2026

Last Modified

Sep 15, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54555rtk filters and compresses command outputs before they reach…7.8
• CVE-2026-54556Http4s is a Scala interface for HTTP services. Prior to 0.23…8.2
• CVE-2026-54557mise manages dev tools like node, python, cmake, and terrafo…5.5
• CVE-2026-54559PocketSphinx is a small speech recognizer. Prior to 5.1.1, t…6.9
• CVE-2026-5456A vulnerability was identified in Align Technology My Invisa…3.3
• CVE-2026-54560Cloudreve is a self-hosted file management and sharing syste…7.6
• CVE-2026-54562Cloudreve is a self-hosted file management and sharing syste…6.5
• CVE-2026-54563Cloudreve is a self-hosted file management and sharing syste…7.1
• CVE-2026-54565rhwp is an HWP viewer and editor implemented in Rust and Web…4.7
• CVE-2026-54567Flask-Reuploaded provides file uploads for Flask. From 1.5.0…7.5
• CVE-2026-54568Microsoft UFO open-source framework for intelligent automati…4.3
• CVE-2026-54569SENAITE.CORE is the core framework for the SENAITE laborator…9.8