CVE-2026-79622

Name of the Vulnerable Software and Affected Versions dekdee adobe-xd-mcp version 1.0.0

Description A path traversal issue exists in the file-access-from-request endpoint within the src/parsers/xd-parser.ts file. A remote attacker can exploit this by manipulating the outputFile or outputDir arguments, potentially allowing unauthorized access to files or directories outside the intended path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the outputFile and outputDir arguments in the file-access-from-request endpoint until the issue is resolved.