bitbonsai

Products

ProductCVEsExploitedLatest
mcpvault2–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-57442 Medium 6.9 MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested 0.2%
  • CVE-2026-57441 High 8.4 MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence 0.2%