CVE-2026-81847 | MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287 pipeline_tools.py save_pipeline/load_pipeline path traversal (Issue 31)

August 27, 2026 Yanac

A vulnerability classified as problematic has been found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save_pipeline/load_pipeline of the file pipeline_tools.py. Performing a manipulation results in path traversal.

This vulnerability is identified as CVE-2026-81847. The attack can be initiated remotely. Additionally, an exploit exists.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More