Information Exposure Affecting mcp-memory-keeper package, versions <0.13.0
Threat Intelligence
Snyk has a proof-of-concept or detailed explanation of how to exploit this vulnerability.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Information Exposure vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-JS-MCPMEMORYKEEPER-18020644
- published20 Jul 2026
- disclosed17 Jul 2026
- creditUnknown
Introduced: 17 Jul 2026
NewCVE-2026-54561 (opens in a new tab)How to fix?
Upgrade mcp-memory-keeper to version 0.13.0 or higher.
Overview
mcp-memory-keeper is a MCP server for persistent context management in AI coding assistants
Affected versions of this package are vulnerable to Information Exposure in the context_import tool, which passes the caller-supplied filePath straight to fs.readFileSync with no path confinement, accepting both .. sequences and absolute paths. An attacker who can invoke the tool, through a malicious MCP client or a prompt-injected agent, can read arbitrary local files such as other users' exported sessions, credential and config files, .env files, SSH keys, or /etc/passwd by supplying a traversal or absolute path, obtaining valid JSON files through context_get and context_export and the leading bytes of non-JSON files through the JSON.parse SyntaxError returned verbatim.