MCPA-2026-0087
lowpath-traversalCVSS 5.3
skill-ninja-mcp-server skill-management tools path traversal (CVE-2026-19328)
skill-ninja-mcp-server (npm) 0.1.0: the getInstalledSkills/installSkill/updateAgentsMd/uninstallSkill MCP tools pass the caller-controlled workspacePath argument into filesystem operations in src/installer.ts without trusted-root enforcement, so a prompt-injected or malicious tool call can read, write, and delete files outside the intended workspace (path traversal). Fixed in 0.1.1, which adds trusted-root workspace guards (patch 855b46739e0f6e8388f17f9d0066ac4298a3965d). The @iflow-mcp/aktsmm-skill-ninja-mcp-server republish mirrors only the vulnerable 0.1.0 build (installer.js byte-identical) and has no fixed release, so it is recorded as last_affected 0.1.0.
Affected packages
| Ecosystem | Package | Affected versions |
|---|---|---|
| npm | skill-ninja-mcp-server | >= 0, < 0.1.1 |
| npm | @iflow-mcp/aktsmm-skill-ninja-mcp-server | >= 0, <= 0.1.0 |
Identifiers
CVE-2026-19328GHSA-866p-rrc7-6r5xCWE-22
References
- advisory https://github.com/advisories/GHSA-866p-rrc7-6r5x
- web https://nvd.nist.gov/vuln/detail/CVE-2026-19328
- web https://github.com/aktsmm/skill-ninja-mcp-server/issues/2
- fix https://github.com/aktsmm/skill-ninja-mcp-server/commit/855b46739e0f6e8388f17f9d0066ac4298a3965d
Timeline
- Published: 2026-08-09