THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-19370 (MEDIUM 5.3) — A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component geminithinking. This manipulation of the argument sessionCommand/sessionPath causes path traversal. The

[NVD] CVE-2026-19370 (MEDIUM 5.3) — A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component geminithinking. This manipulation of the argument sessionCommand/sessionPath causes path traversal. The

mednvdPublished 2026-08-09

CVE-2026-19370 CVSS: 5.3 MEDIUM Published: 2026-08-09T22:16:31.393

A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component geminithinking. This manipulation of the argument sessionCommand/sessionPath causes path traversal. The attack requires local access. The project was inform

Indicators of compromise

CVE-2026-19370cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-19370