CVE-2026-15751

Name of the Vulnerable Software and Affected Versions mastergo-design mastergo-magic-mcp versions prior to 0.2.1

Description Path traversal occurs in the execute() function within the mastergo/component-workflow.md file of the mcp getComponentGenerator component. This issue arises from the improper handling of the rootPath argument, allowing a local attacker to access files and directories outside the intended folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.