CVE-2026-19330: ANGRYSKY56 Advanced-Reasoning-Mcp

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the function create_system_json/create_library to get_system_json/switch_memory_library of the file src/index.ts. This manipulation causes path traversal. The attack requires local access. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

• ANGRYSKY56 Advanced-Reasoning-Mcp: version 1.0.0 only

Published 2026-08-09. Last modified 2026-08-14.