CVE-2026-7645

MediumCVSS 6.5

Published: 02/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

40th percentile - higher than 40% of all known CVEs

Summary

A vulnerability was found in ruvnet sublinear-time-solver 1.5.0 affecting the export_state function (src/consciousness-explorer/mcp/server.js) in the MCP Interface component. Input manipulation results in path traversal, and the attack can be executed remotely. The exploit has been made public and the project has not responded.

Risk Assessment

A remote attacker could access files outside the intended directory, potentially leading to information disclosure. The public exploit increases the risk of exploitation.

Recommendation

Enforce validation and normalization of paths in the export_state function and restrict MCP component access to trusted networks until a fix is released.

Other vulnerabilities in sublinear-time-solver

CVE-2026-55609High
In sublinear-time-solver before 1.6.0 and consciousness-explorer before 1.1.2, the export_state, import_state, saveVectorToFile, and loadVectorFromFile tools pass attacker-controlled file paths to filesystem operations without restrictions. An attacker can read, write, or overwrite any file accessible to the server process, causing confidentiality and integrity loss and possible service disruption.

Original NVD description (English source)

A vulnerability was found in ruvnet sublinear-time-solver 1.5.0. Affected by this vulnerability is the function export_state of the file src/consciousness-explorer/mcp/server.js of the component MCP Interface. The manipulation results in path traversal. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS