CVE-2026-7810

Medium

Published: 05 May 2026

Published

05 May 2026

Modified

05 May 2026

KEV Added

—

Patch

—

CVSS Score v4 5.5 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Score 0.0007 20.6th percentile

Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-7810 is a medium-severity Path Traversal (CWE-22) vulnerability. Its CVSS base score is 5.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 20.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

This vulnerability is AI-related — categorised as AI Agent Protocols and Integrations; in the Protocol-Specific Risks risk domain.

The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2026-7810 is a path traversal vulnerability (CWE-22) affecting the UsamaK98/python-notebook-mcp project up to commit a05a232815809a7e425b5fa7be26e0d4369894c2. The flaw resides in the create_notebook, read_notebook, edit_cell, and add_cell functions within the server.py file. This open-source Python-based notebook management component uses a rolling release model, so no specific version ranges for affected or patched releases are available.

The vulnerability can be exploited remotely by unauthenticated attackers with low complexity and no user interaction required, as indicated by its CVSS v3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Successful exploitation enables limited impacts on confidentiality, integrity, and availability, allowing attackers to traverse paths and potentially access or manipulate files outside the intended directory via the affected endpoints.

Advisories from VulDB note that an exploit has been published and may be used in attacks, with the project informed early via GitHub issue #5 but receiving no response yet. No patches or mitigations are detailed in available references, including the project repository at https://github.com/UsamaK98/python-notebook-mcp/. Security practitioners should monitor the repository for updates and consider restricting network access to affected instances.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2026-27211

Vulnerability details

A flaw has been found in UsamaK98 python-notebook-mcp up to a05a232815809a7e425b5fa7be26e0d4369894c2. Impacted is the function create_notebook/read_notebook/edit_cell/add_cell of the file server.py. This manipulation causes path traversal. It is possible to initiate the attack remotely. The exploit has been published and may…

be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

CWE(s): CWE-22

AI Security AnalysisAI

AI Category: AI Agent Protocols and Integrations
Risk Domain: Protocol-Specific Risks
OWASP Top 10 for LLMs 2025: None mapped
Classification Reason: Matched keywords: mcp

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access

Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.

attack.mitre.org →

T1005 Data from Local System Collection

Adversaries may search local system sources, such as file systems, configuration files, local databases, virtual machine files, or process memory, to find files of interest and sensitive data prior to Exfiltration.

attack.mitre.org →

Why these techniques?

Path traversal in remotely exposed server.py endpoints (create/read/edit notebook functions) is directly exploitable via T1190 against a public-facing application. Exploitation yields unauthorized read/write access to arbitrary local files, enabling T1005 for data collection from the local system.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1