CVE-2026-19368

Name of the Vulnerable Software and Affected Versions PV-Bhat gemsuite-mcp version 1.0.0

Description A path traversal issue exists within the gemini search/gemini reason/gemini process/gemini analyze component, specifically in the src/handlers/unified-gemini.ts file. A local attacker can exploit this by manipulating the file path or file paths arguments to access files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.