CVE-2026-7318: Elie Mcp-Project

Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function search_papers of the file research_server.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

• Elie Mcp-Project: version 0.1.0 only

Published 2026-04-28. Last modified 2026-07-24.