radar.offseq.comadvisoryCVE-2026-14699: Symlink Following in zcaceres markdownify-mcp - Live Threat Intelligence - Threat Radar | OffSeq.com
CVE-2026-14699 describes a local symlink-following vulnerability in the assertPathAllowed path-validation function of zcaceres' markdownify-mcp (an MCP server for converting content to Markdown), affecting versions up to 1.1.0. A local attacker can manipulate symbolic links to bypass the path allow-list and access or modify files outside the intended scope; a fix PR exists but is unmerged, so no patch is currently available.
TL;DR Unpatched symlink-following flaw in markdownify-mcp's path validation lets local attackers escape its file-access restrictions.
CVEs named here
- CVE-2026-14699
Technologies named here
- threat-finder
- markdownify-mcp
- Model Context Protocol
- TypeScript
Techniques named here
Related in AppSec
github.comadvisoryFlowise MCP Security Bypass Enables RCE
huntress.comwriteupInside an Oracle Database SQL Injection Attack | Huntress
github.comrepoOASIS
blog.trailofbits.comwriteup