CVE-2026-15528

Summary

A vulnerability was found in lamaalrajih kicad-mcp up to 3.3.1. This issue affects some unknown processing of the file kicad_mcp/utils/path_validator.py. Performing a manipulation of the argument project_path/schematic_path results in protection mechanism failure. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected Software

Weaknesses

• CWE-693: Protection Mechanism Failure

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/vuln/377866
• https://vuldb.com/vuln/377866/cti
• https://vuldb.com/cve/CVE-2026-15528
• https://vuldb.com/submit/854531
• https://github.com/lamaalrajih/kicad-mcp/issues/57
• https://github.com/lamaalrajih/kicad-mcp/

• ←Previous
• Next→