CVE-2026-7588 Details

A path traversal vulnerability has been identified in ggerve coding-standards-mcp, specifically within the 'get_style_guide' and 'get_best_practices' functions of 'server.py'. The issue arises because the 'language' argument is not properly validated before being used to construct file paths. This flaw allows for the manipulation of the 'language' input to traverse directories and access files outside the intended 'templates' directory. The vulnerability can be exploited remotely, and the details have been made public.

To address this vulnerability, it is recommended to validate the 'language' input by restricting it to a fixed allowlist of known template names. Alternatively, if free-form input is necessary, it should be validated with a strict regular expression and the resolved path must be checked to ensure it remains within the 'templates' directory. Adding regression tests for payloads containing traversal tokens or path separators would also be beneficial.