CVE-2026-7588

A vulnerability was found in ggerve coding-standards-mcp. This issue affects the function get_style_guide/get_best_practices of the file server.py. The manipulation of the argument Language results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-22

• https://github.com/ggerve/coding-standards-mcp/
• https://github.com/ggerve/coding-standards-mcp/issues/3
• https://vuldb.com/submit/804390
• https://vuldb.com/vuln/360541
• https://vuldb.com/vuln/360541/cti

Published

May 1, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75871GitLab has remediated a vulnerability in the GitLab AI Gatew…9.6
• CVE-2026-75872HTML Injection in the public subscription form in maalfer Ma…6.9
• CVE-2026-75874Sandbox escape in the Remote Settings Client component. This…10
• CVE-2026-75876A security vulnerability has been detected in xianrendzw Eas…6.3
• CVE-2026-75877A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This…9.9
• CVE-2026-75878IBM Sterling File Gateway could allow a remote attacker to b…9.1
• CVE-2026-75880An authenticated client could attach a consumer with a selec…6.5
• CVE-2026-75883The code in pppd that formats a response to a PEAP Request p…6.8
• CVE-2026-75884A flaw was found in AWX. The container group pod_spec_overri…9.1
• CVE-2026-75885A flaw was found in the OpenShift console. Unauthenticated a…9.3
• CVE-2026-75886A flaw was found in openshift/console. An unauthenticated re…7.2
• CVE-2026-75887A flaw was found in the OpenShift console. An unauthenticate…7.5