CVE-2026-15524

Name of the Vulnerable Software and Affected Versions alioshr memory-bank-mcp versions 0.2.1 through 3.1

Description A path traversal issue exists within the list-project-files-validation-factory.ts file. This occurs when the projectName argument is manipulated, allowing an attacker with local access to access files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.