bitbonsai
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| mcpvault | 2 | – | Sep 15, 2026 |
Exploited and recent CVEs
- CVE-2026-57442 MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested 0.2%
- CVE-2026-57441 MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence 0.2%