PatchSiren

00Kisumi00 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW 00Kisumi00 CVE published 2026-09-20

CVE-2026-94037

A weakness in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405 allows for path traversal via the filename argument in the ControlFlowNode function of main.py. Remote exploitation is possible. The project follows a rolling release approach, so specific version details for affected or updated releases are not provided. Defenders should assess exposure and prioritize verification o [truncated]