CVE-2026-81485

Name of the Vulnerable Software and Affected Versions danielpopamd linkedin-ads-mcp version 1.0.0

Description A path traversal issue exists in the Media Upload component. This occurs when the filePath argument passed to the fs.readFileSync() function in the src/tools/campaign-management.ts file is not properly validated, allowing a remote attacker to access files outside the intended directory.

Recommendations As a temporary workaround, restrict the use of the fs.readFileSync() function within the Media Upload component until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.