CVE-2026-82111

Name of the Vulnerable Software and Affected Versions iswalle getnote-mcp versions prior to 1.5.1

Description A path traversal issue exists in the upload image component within the src/index.ts file. A remote attacker can exploit this by manipulating the image path argument passed to the fs.readFileSync() function. Path traversal is a technique used to access files and directories that are stored outside the intended folder.

Recommendations Update to version 1.5.1. As a temporary mitigation, restrict access to the upload image component.