CVE-2026-116045 | 1999AZZAR designer-mcp up to 2.1.0 MCP Interface motion-dev-guidelines.md get_reference name path traversal (Issue 14)

October 24, 2026 Yanac

A vulnerability, which was classified as problematic, was found in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP Interface. The manipulation of the argument Name results in path traversal.

This vulnerability is known as CVE-2026-116045. It is possible to launch the attack remotely. Furthermore, an exploit is available.

This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Applying a patch is advised to resolve this issue.VulDB Recent EntriesRead More