Path Traversal Vulnerability in aaronsb Memory-Graph Tool

CVE-2026-19285

What is CVE-2026-19285?

Aaronsb memory-graph is susceptible to a path traversal vulnerability within its JsonMemoryStorage functions. The issue affects the createDomain, getMemories, and saveMemories methods in the memoryTools.ts file. This vulnerability allows attackers to exploit the system from a local position and manipulate file paths, potentially leading to unauthorized access to sensitive data. The project operates on a rolling release basis, with no specified version details for affected or updated releases. Despite early notification of this issue through an issue report, the developers have yet to respond.

References