CVE-2026-86541: knowns Path Traversal in the code.replace MCP Action
An editing tool that accepts an absolute path and uses it verbatim is not a code editor with a bug. It is a file-write API that happens to be pointed at code most of the time.
taxonomy / tag
#prompt-injection
CVE-2026-86439: knowns Path Traversal via MCP Doc and Memory Tools
When an MCP tool argument reaches filepath.Join unvalidated, the attacker does not need to touch the server at all — they only need to get one sentence into something the model reads.