CVE-2026-81845

Name of the Vulnerable Software and Affected Versions arben-adm mcp-sequential-thinking versions prior to 0.6.0

Description A path traversal issue exists in the Import Session/Export Session component within the mcp sequential thinking/server.py file. Remote attackers can exploit this by manipulating the file path argument in the import session() and export session() functions. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with dot-dot-slash (../) sequences.

Recommendations Update to version 0.6.0. As a temporary mitigation, restrict access to the import session() and export session() functions.