CVE-2026-49986: The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version 3.17.1 treats th
Summary
The Cortex MCP server (a tool that lets AI assistants like Claude access persistent memory across projects) before version 3.17.1 has a vulnerability where it trusts the project directory set by Claude Code without proper validation. An attacker can place two specific files (`mcp_server/` folder and `ui/unified-viz.html`) in a malicious repository to trick Cortex into running arbitrary Python code with the user's privileges when the `open_visualization` tool is used.
Solution / Mitigation
Update to version 3.17.1 or later, which fixes the issue.
Vulnerability Details
EPSS: 0.0%
August 14, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-49986
First tracked: August 14, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 95%