CVE-2026-57442 Details
Description
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and node_modules path segments do not match the restriction and pass both isAllowed() and isAllowedForListing(). An attacker who influences a path selected by an AI agent can traverse nested repository or Obsidian metadata, read remote URLs or embedded tokens, or cause nested node_modules content to pollute the listAllTags index. This issue is fixed in version 0.11.5.
A path traversal vulnerability has been identified in MCPVault versions prior to 0.11.5. The issue arises in the PathFilter component, which uses root-anchored deny-list patterns that fail to restrict access to nested .git, .obsidian, and node_modules directories. This oversight allows an attacker to manipulate paths chosen by AI agents, potentially accessing sensitive repository or Obsidian metadata, reading remote URLs or embedded tokens, or causing interference with the listAllTags index by introducing clutter from nested node_modules. The vulnerability has been addressed in version 0.11.5.
Users are advised to update MCPVault to version 0.11.5, which fixes the path traversal vulnerability by denying access to .git, .obsidian, and node_modules directories at any depth within the vault.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 15, 2026CISA-ADP
Assessed Sep 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/bitbonsai/mcpvault/issues/128 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/bitbonsai/mcpvault/commit/0adb43901e1a08e85e14b42a8df2442fabc0b64a | [email protected] | Source CodeVendor |
| https://github.com/bitbonsai/mcpvault/commit/8795716b90d1c4090a82a58647e030763513f17e | [email protected] | Source CodeVendor |
| https://github.com/bitbonsai/mcpvault/issues/128 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/bitbonsai/mcpvault/security/advisories/GHSA-9c83-rr99-vfwj | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-538 | Insertion of Sensitive Information into Externally-Accessible File or Directory | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| bitbonsai MCPVault | < 0.11.5 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 16, 2026 | CVE Modified | CISA-ADP |
| Sep 15, 2026 | New CVE Received | [email protected] |