{"data":{"id":"47915e7a-d8d8-4c65-8596-9e6dd824bd55","title":"GHSA-f7wf-v2vw-mpcx: mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath","summary":"GHSA-f7wf-v2vw-mpcx affects mcp-memory-keeper, where the context_import tool passed the caller-supplied filePath directly to fs.readFileSync without path confinement. A malicious MCP client, or an LLM agent prompt-injected into calling the tool, could read any file the server process can access. Valid JSON files are imported in full and retrievable through context_get or context_export, while other files leak their leading bytes through the JSON.parse SyntaxError message.","solution":"Fixed in 0.13.0 (PR #36). Upgrade to >= 0.13.0. There is no configuration-only workaround for affected versions.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-f7wf-v2vw-mpcx","publishedAt":"2026-07-17T19:23:07.000Z","cveId":"CVE-2026-54561","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":["mcp-memory-keeper@< 0.13.0 (fixed: 0.13.0)"],"affectedPackageNames":["mcp-memory-keeper"],"affectedPackageRefs":["npm:mcp-memory-keeper"],"affectedVendors":[],"affectedVendorsRaw":["mcp-memory-keeper","MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00249,"epssCheckedAt":"2026-11-13T00:12:55.960Z","kevDateAdded":null,"advisoryAliases":["GHSA-f7wf-v2vw-mpcx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-17T19:23:07.000Z","fixReleasedAt":"2026-06-05T19:13:14.062Z","daysToFix":-42,"fixCheckedAt":"2026-10-29T21:33:01.538Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"mcp-memory-keeper","fixedVersion":"0.13.0","matchedVersion":"0.13.0","fixReleasedAt":"2026-06-05T19:13:14.062Z","daysToFix":-42,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:33:01.390Z"}]}}