CVE-2026-15528: lamaalrajih kicad-mcp path_validator.py protection mechanism

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-13 · updated 2026-10-24
Weakness: CWE-693

Description

A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown processing of the file kicad_mcp/utils/path_validator.py. Performing a manipulation of the argument project_path/schematic_path results in protection mechanism failure. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

lamaalrajih kicad-mcp: 3.3.0, 3.3.1

References

https://github.com/lamaalrajih/kicad-mcp/
https://github.com/lamaalrajih/kicad-mcp/issues/57
https://vuldb.com/cve/CVE-2026-15528
https://vuldb.com/submit/854531
https://vuldb.com/vuln/377866
https://vuldb.com/vuln/377866/cti

Get alerted when CVE-2026-15528 or the next vulnerability affects your stack