THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19270 (MEDIUM 5.3) — A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_journey/analyze_journey/usage_stats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename

[NVD] CVE-2026-19270 (MEDIUM 5.3) — A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_journey/analyze_journey/usage_stats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename

mednvdPublished 2026-08-08

CVE-2026-19270 CVSS: 5.3 MEDIUM Published: 2026-08-08T08:16:51.837

A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_journey/delete_journey/analyze_journey/usage_stats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path traversal. The attack requires a loc

Indicators of compromise

CVE-2026-19270cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19270