What’s Vulnerable › Products

bitbonsai mcpvault vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your bitbonsai mcpvault version is affected

Latest bitbonsai mcpvault vulnerabilities

• CVE-2026-57442 — MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested (CVSS 6.9)
• CVE-2026-57441 — MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence (CVSS 8.4)