← Back

Busymac

busymac

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Pal Mcp Server
pal_mcp_server
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-66689
1Busymac
1Pal Mcp Server
Jun 17, 2026
Jan 12, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() valid...Show more
A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() validation function that uses exact string matching against a blacklist of system directories. Attackers can bypass these restrictions by accessing subdirectories of blacklisted paths.Show less