CVE-2026-19368 PV-Bhat CVE debrief

Who should care

Users of gemsuite-mcp 1.0.0, administrators of affected systems, security teams monitoring local threat vectors, and operators of potentially exposed platforms should review and act on this vulnerability. Vulnerability management and security teams should prioritize patching and review compensating controls for exposed systems while remediation is scheduled and verified. The project was informed of the problem early through an issue report but has not responded yet. Security teams should also track exceptions and retest remediated assets, and check relevant monitoring, detection, and logs for exposed assets that need extra review.

Technical summary

CVE-2026-19368 is a path traversal vulnerability in gemsuite-mcp 1.0.0. The vulnerability exists in the file src/handlers/unified-gemini.ts and is triggered by manipulation of the file_path/file_paths argument. The attack requires local access and authentication. Users of gemsuite-mcp 1.0.0, administrators of affected systems, and security teams monitoring local threat vectors should take action. Vulnerability management and security teams should prioritize patching and review compensating controls for exposed systems while remediation is scheduled and verified. The project was informed of the problem early through an issue report but has not responded yet.

Defensive priority

Medium priority due to local attack vector and potential for path traversal.

Recommended defensive actions

• Verify affected versions and inventory
• Apply vendor patch if available
• Monitor for local exploitation attempts
• Restrict access to sensitive files and directories
• Review compensating controls for exposed systems
• Track exceptions and retest remediated assets
• Check relevant monitoring, detection, and logs for exposed assets

Evidence notes

Evidence is limited; verify with vendor and additional sources. Local attack vector requires authentication. The vulnerability exists in the file src/handlers/unified-gemini.ts and is triggered by manipulation of the file_path/file_paths argument. Users should verify affected versions, review compensating controls, and monitor for local exploitation attempts.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.