CVE-2026-15528 | BDVDB-2026-347237 Detail
lamaalrajihkicad-mcp
Description#
A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown processing of the file kicad_mcp/utils/path_validator.py. Performing a manipulation of the argument project_path/schematic_path results in protection mechanism failure. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-693 Protection Mechanism Failure
References#
Exploit#
History#
- Version 1Record published in the CVE List.