{"data":{"id":"47915e7a-d8d8-4c65-8596-9e6dd824bd55","title":"GHSA-f7wf-v2vw-mpcx: mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath","summary":"A security flaw in mcp-memory-keeper allowed arbitrary local file reads through the `context_import` function, which didn't validate file paths before reading them. An attacker (either a malicious client or an LLM agent affected by prompt injection, a technique where hidden instructions are embedded in AI inputs) could read any file accessible to the server process, including credential files and configuration files, or view partial file contents through error messages.","solution":"Fixed in version 0.13.0 (PR #36). The patch: (1) restricts imports to a server-owned exports directory using `realpathSync` and rejects `../` traversal and absolute paths outside the directory, (2) separates file read and JSON parsing operations with generic error messages instead of echoing file bytes, and (3) adds security regression tests covering arbitrary-read, traversal, and symlink escape vectors. Users must upgrade to version >= 0.13.0; there is no configuration-only workaround for affected versions.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-f7wf-v2vw-mpcx","publishedAt":"2026-07-17T19:23:07.000Z","cveId":"CVE-2026-54561","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["mcp-memory-keeper@< 0.13.0 (fixed: 0.13.0)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["mcp-memory-keeper"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-07-17T19:23:07.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}