What happened
NVD published CVE-2026-94044 on 2026-09-20 (CVSS 7.3 HIGH, CWE-22 path traversal; public exploit maturity). The repository does not version releases and the project had not responded as of publication.
Why it matters
MCP file-write tools are the agent's write channel to disk; an unauthenticated path-traversal here lets a remote attacker write web shells/config into the server's filesystem — an agentic file-write tool becoming an arbitrary-write RCE vector, and any prompt-injected agent could also be steered into the vulnerable call.
Attack vector
Unauthenticated remote manipulation of the filePath/content arguments to the create_file function of the MCP route leads to path traversal (CWE-22) and arbitrary file write on the host running the MCP server.
Affected systems
03-lovepreetSingh MCP (app/api/mcp/route.ts) up to commit f95d035c
Mitigation
No vendor reply yet — if deployed, do not expose the HTTP route unauthenticated; enforce server-side path canonicalization on any agent file-write tool. https://vuldb.com/cve/CVE-2026-94044