CVE-2026-94046 | 0215AndrewFeng ACE-MCP up to 4.10.8 MCP Tool getFileSnippet.ts get_file_snippet projectRootPath/filePath path traversal

A vulnerability classified as problematic was found in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function get_file_snippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal.

The identification of this vulnerability is CVE-2026-94046. The attack may be launched remotely. Furthermore, there is an exploit available.

isPathInsideProjectRoot only blocks filePath escaping the attacker-chosen projectRootPath; the root itself is untrusted client input – set projectRootPath=/etc, filePath=hosts and the guard passes. The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More