CVE-2026-19285

Name of the Vulnerable Software and Affected Versions aaronsb memory-graph versions up to 5cfd2382778837b9f6399080956eee670d00452c

Description A path traversal issue exists where a local attacker can manipulate the system. The flaw is located in the src/tools/memoryTools.ts file within the JsonMemoryStorage.createDomain(), JsonMemoryStorage.getMemories(), and JsonMemoryStorage.saveMemories() functions. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized.

Recommendations As a temporary workaround, consider restricting the use of the JsonMemoryStorage.createDomain(), JsonMemoryStorage.getMemories(), and JsonMemoryStorage.saveMemories() functions until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.