MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-57441 · Microsoft / collected KEV context

EUVD-2026-79125

GHSA-j99q-93c9-h869

cve-program · CVE-2026-57441

• https://github.com/bitbonsai/mcpvault/security/advisories/GHSA-j99q-93c9-h869
• https://github.com/bitbonsai/mcpvault/commit/0adb43901e1a08e85e14b42a8df2442fabc0b64a
• https://github.com/bitbonsai/mcpvault/commit/b9ea91a1c6d6adfec3e9e0483d9d79669e927fa8

euvd · EUVD-2026-79125

• https://github.com/bitbonsai/mcpvault/security/advisories/GHSA-j99q-93c9-h869
• https://github.com/bitbonsai/mcpvault/commit/0adb43901e1a08e85e14b42a8df2442fabc0b64a
• https://github.com/bitbonsai/mcpvault/commit/b9ea91a1c6d6adfec3e9e0483d9d79669e927fa8

nvd · CVE-2026-57441

• https://github.com/bitbonsai/mcpvault/commit/0adb43901e1a08e85e14b42a8df2442fabc0b64a
• https://github.com/bitbonsai/mcpvault/commit/b9ea91a1c6d6adfec3e9e0483d9d79669e927fa8
• https://github.com/bitbonsai/mcpvault/security/advisories/GHSA-j99q-93c9-h869

osv · GHSA-j99q-93c9-h869

• https://github.com/bitbonsai/mcpvault/security/advisories/GHSA-j99q-93c9-h869
• https://github.com/bitbonsai/mcpvault

No related operational record is retained in the current change model.