CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the NocteDefensor LudusMCP up to version 1.0.24, specifically in the `insert_creds_range_config` component's handling of the `configPath/outputPath` argument. This flaw allows local attackers to manipulate file paths, potentially leading to unauthorized access to sensitive files. Organizations using this software should prioritize remediation, especially those with local access controls that could be exploited by malicious insiders.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected is an unknown function of the file src/tools/insertCredsRangeConfig.ts of the component insert_creds_range_config. Executing a manipulation of the argument configPath/outputPath can lead to path traversal. The attack is restricted to local execution. The project was informed of the problem early through an issue report but has not responded yet.