{"vulnerability": "CVE-2026-86439", "sightings": [{"uuid": "99f2a0ff-c43c-4a42-94f7-f021240c6667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86439", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muxpx2ca5423", "content": "\ud83d\udfe0 CVE-2026-86439 - High (8.8)\n\nknowns versions before 0.30.0 fail to validate filesystem paths in MCP tool arguments, allowing a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-86439/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-08T00:04:22.766659Z"}, {"uuid": "4dd7f327-1676-4f61-9b95-9690a268762d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-86439", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz3c5rmgl24", "content": "CVE-2026-86439 - knowns\nVersions of knowns older than 0.30.0 do not verify the file locations entered into its MCP functions. An attacker could give specially crafted paths to read, create, change, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#knowns #knownsdev #CVE #infosec", "creation_timestamp": "2026-09-08T13:00:06.664824Z"}]}