CVE-2026-19365
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
In Ichigo3766 image-gen-mcp 0.1.0, a vulnerability was found in an unknown function of src/index.ts (upscale_images component). Manipulation of the output_path argument leads to path traversal. The attack must be performed locally.
Risk Assessment
Path traversal vulnerability may allow an attacker to write files to arbitrary locations, potentially leading to system integrity compromise.
Recommendation
It is recommended to validate the output_path argument, use secure base paths, and restrict access to the upscale_images function.
Original NVD description (English source)
A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscale_images. Such manipulation of the argument output_path leads to path traversal. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.