Elinsky vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Elinsky products: 1 record(s), with severity, exploitation and fixes.

Execution-system-mcp 1

Exploited only (KEV) →

CVE-2026-7319 High · 7.3 CWE-22 Apr 28, 2026

elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal

A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function _get_context_file_path of the file src/execution_system_mcp/server.py of the component add_action Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used.