CVE-2026-7159: douinc mkdocs-mcp-plugin server.py list_documents path traversal

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-27 · updated 2026-10-26
Weakness: CWE-22

Description

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function read_document/list_documents of the file server.py. Performing a manipulation of the argument docs_dir/file_path results in path traversal. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor confirms, that the "fix will be published within a few days."

Affected products

douinc mkdocs-mcp-plugin: 0.4.0, 0.4.1

References

https://github.com/douinc/mkdocs-mcp-plugin/
https://github.com/douinc/mkdocs-mcp-plugin/issues/6
https://github.com/douinc/mkdocs-mcp-plugin/issues/6#issuecomment-4223718119
https://vuldb.com/submit/802063
https://vuldb.com/vuln/359758
https://vuldb.com/vuln/359758/cti

Get alerted when CVE-2026-7159 or the next vulnerability affects your stack