CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the HistoryService component of the abrinsmead mindpilot-mcp version 0.5.0, allowing local attackers to manipulate the argument ID. This flaw could lead to unauthorized access to sensitive files on the system. Organizations using this software should prioritize remediation, especially if they have local user access controls in place.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown functionality of the component HistoryService. This manipulation of the argument ID causes path traversal. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.