{"id":"CVE-2026-57442","aliases":["GHSA-9c83-rr99-vfwj"],"url":"https://o3.security/vulnerability/CVE-2026-57442","summary":"MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested","details":"PathFilter's deny-list glob patterns are anchored, so `.git`, `.obsidian`, and `node_modules` were only blocked at the vault root. Nested copies inside the vault (e.g. `tools/cli/node_modules/...`, `tools/somerepo/.git/config`, a nested `.obsidian/`) were fully traversable via isAllowed/isAllowedForListing. Impact: a nested `.git/config` (remote URLs / embedded tokens) and nested `.obsidian` contents could be read, under the same prompt-injection threat model as GHSA-j99q-93c9-h869 (an attacker influences the path an agent reads). It also caused nested `node_modules` to pollute the tag index (#128, the public symptom). Fixed in 0.11.5 by denying these restricted names at any path depth (matched case-insensitively as any path segment).","published":"2026-09-15T17:50:48.077Z","modified":"2026-10-21T02:58:45.059703997Z","cvss":null,"epss":{"score":0.00166,"percentile":0.06213,"asOf":"2026-09-17"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"npm","name":"@bitbonsai/mcpvault","fixedVersion":"0.11.5"}],"fix":{"url":"https://github.com/bitbonsai/mcpvault/commit/0adb43901e1a08e85e14b42a8df2442fabc0b64a","label":"bitbonsai/mcpvault@0adb439"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/57xxx/CVE-2026-57442.json"},{"type":"ADVISORY","url":"https://github.com/bitbonsai/mcpvault/security/advisories/GHSA-9c83-rr99-vfwj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57442"},{"type":"REPORT","url":"https://github.com/bitbonsai/mcpvault/issues/128"},{"type":"FIX","url":"https://github.com/bitbonsai/mcpvault/commit/0adb43901e1a08e85e14b42a8df2442fabc0b64a"},{"type":"FIX","url":"https://github.com/bitbonsai/mcpvault/commit/8795716b90d1c4090a82a58647e030763513f17e"},{"type":"PACKAGE","url":"https://github.com/bitbonsai/mcpvault"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-21T02:58:45.059703997Z"}}