CVE-2026-79622 | dekdee adobe-xd-mcp 1.0.0 file-access-from-request Endpoint src/parsers/xd-parser.ts outputFile/outputDir path traversal

August 25, 2026 Yanac

A vulnerability was found in dekdee adobe-xd-mcp 1.0.0. It has been declared as critical. Impacted is an unknown function of the file src/parsers/xd-parser.ts of the component file-access-from-request Endpoint. Executing a manipulation of the argument outputFile/outputDir can lead to path traversal.

This vulnerability is registered as CVE-2026-79622. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More