CVE-2026-7272 Details
Description
A flaw has been found in WilliamCloudQi matlab-mcp-server up to ab88f6b9bf5f36f725e8628029f7f6dd0d9913ca. The affected element is the function generate_matlab_code/execute_matlab_code of the file src/index.ts of the component MCP Interface. Executing a manipulation of the argument scriptPath can lead to path traversal. The attack can be executed remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A path traversal vulnerability allowing arbitrary file writes has been identified in WilliamCloudQi's matlab-mcp-server, specifically in the MCP Interface component within the file src/index.ts. This vulnerability affects the generate_matlab_code and execute_matlab_code functions, which improperly handle the scriptPath argument. The lack of validation allows remote attackers to write files to arbitrary locations on the server's filesystem, potentially leading to unauthorized data manipulation or system compromise. This issue is present in the commit ab88f6b9bf5f36f725e8628029f7f6dd0d9913ca, with no fixed version available at the time of reporting.
It is recommended to update the scriptPath handling to include proper validation and restrictions, ensuring that only safe, allowlisted paths are used for file writes. Additionally, consider removing the script-saving feature when the MCP server is accessible to untrusted users.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Apr 28, 2026CISA-ADP
Assessed Apr 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/BruceJqs/public_exp/issues/18 | [email protected] | ExploitIssue TrackingTechnical Description |
| https://github.com/WilliamCloudQi/matlab-mcp-server/ | [email protected] | ProductVendor |
| https://github.com/WilliamCloudQi/matlab-mcp-server/issues/8 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://vuldb.com/submit/802911 | [email protected] | Technical Description |
| https://vuldb.com/vuln/359927 | [email protected] | AdvisoryExploitPartial Content |
| https://vuldb.com/vuln/359927/cti | [email protected] |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| WilliamCloudQi matlab-mcp-server | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Apr 28, 2026 | New CVE Received | [email protected] |