CVE-2026-19365

Name of the Vulnerable Software and Affected Versions Ichigo3766 image-gen-mcp version 0.1.0

Description A path traversal issue exists within the upscale images component in the src/index.ts file. A local attacker can manipulate the output path argument to access or overwrite files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly validated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the output path argument in the upscale images component until the issue is resolved.