CVE-2026-81847

Name of the Vulnerable Software and Affected Versions MAA-AI MaaMCP versions prior to 1.1.1.dev6+g2e4a41287

Description A path traversal issue exists in the save pipeline() and load pipeline() functions within the pipeline tools.py file. This flaw allows a remote attacker to perform a manipulation that results in unauthorized access to files or directories outside the intended folder. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.

Recommendations Deploy patch c93ef45cba75295eba26d9ff1ffb9202a91c6150 for versions prior to 1.1.1.dev6+g2e4a41287. As a temporary workaround, restrict the use of the save pipeline() and load pipeline() functions in pipeline tools.py to minimize the risk of exploitation.