Vulnerability · Published Jul 5, 2026 · Assigned by VulDB
CVE-2026-14699zcaceres markdownify-mcp Markdownify.ts assertPathAllowed symlink
Low 3.3
In plain English
A low-severity security flaw in markdownify-mcp from zcaceres. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.2%top 93.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A weakness has been identified in zcaceres markdownify-mcp up to 1.1.0. The affected element is the function assertPathAllowed of the file src/Markdownify.ts. Executing a manipulation can lead to symlink following. The attack can only be executed locally. The pull request to fix this issue awaits acceptance.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| zcaceres | markdownify-mcp | 1.01.1.0 |
Weakness: CWE-61, CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R
References
- VDB-376295 | zcaceres markdownify-mcp Markdownify.ts assertPathAllowed symlink vdb-entry, technical-description
- VDB-376295 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-14699 | CVE Analysis and Report third-party-advisory
- Submit #846864 | zcaceres markdownify-mcp / mcp-markdownify-server up to 1.1.0 CWE-59: Improper Link Resolution Before File Access ('Link Follo third-party-advisory
- https://github.com/zcaceres/markdownify-mcp/issues/108 issue-tracking
- https://github.com/zcaceres/markdownify-mcp/pull/109 issue-tracking, patch
- https://github.com/zcaceres/markdownify-mcp/ product