CVE-2026-7599

MEDIUM

Dayoooun hwpx-mcp MCP index.ts export_to_html path traversal

Title source: cna
STIX 2.1

Description

A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. This affects the function save_document/export_to_text/export_to_html of the file mcp-server/src/index.ts of the component MCP Interface. Performing a manipulation of the argument output_path results in path traversal. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

References (6)

Core 6
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-360556 | Dayoooun hwpx-mcp MCP index.ts export_to_html path traversal
https://vuldb.com/vuln/360556
Signature, Permissions Required signature permissions-required
VDB-360556 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/360556/cti
Third Party Advisory third-party-advisory
Submit #805608 | Dayoooun hwpx-mcp Commit 87850fd67f0488d79fcbf061a29938cae914a15d Path Traversal
https://vuldb.com/submit/805608
Issue Tracking issue-tracking
https://github.com/Dayoooun/hwpx-mcp/issues/3
Exploit exploit issue-tracking
https://github.com/BruceJqs/public_exp/issues/28

Scores

CVSS v3 6.3
EPSS 0.0029
EPSS Percentile 20.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-22
Status published
Products (1)
Dayoooun/hwpx-mcp 0.2.0
Published May 01, 2026
Tracked Since May 02, 2026