Vulnerability-Lookup

CVE-2026-55609 (GCVE-0-2026-55609)

Vulnerability from cvelistv5 – Published: 2026-08-25 18:34 – Updated: 2026-08-26 15:41

Title

sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state

Summary

sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export_state and import_state tools in src/consciousness-explorer/mcp/server.js pass the attacker-controlled filepath parameter to filesystem operations in src/consciousness-explorer/index.js without restricting the destination or rejecting traversal. The saveVectorToFile and loadVectorFromFile tools in src/mcp/server.ts contain the same sink class through the file_path parameter. An attacker able to invoke the MCP tools can read, write, or overwrite any file accessible to the server process, causing confidentiality and integrity loss and possible service disruption. This issue is fixed in consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-26 15:41 UTC

CWE

CWE-73 - External Control of File Name or Path

Assigner

GitHub_M mitre root

References

7 references

URL	Tags
https://github.com/ruvnet/sublinear-time-solver/s…	x_refsource_CONFIRM
https://github.com/BruceJqs/public_exp/issues/32	x_refsource_MISC
https://github.com/ruvnet/sublinear-time-solver/i…	x_refsource_MISC
https://github.com/ruvnet/sublinear-time-solver/pull/20	x_refsource_MISC
https://github.com/ruvnet/sublinear-time-solver/c…	x_refsource_MISC
https://github.com/ruvnet/sublinear-time-solver/c…	x_refsource_MISC
https://github.com/ruvnet/sublinear-time-solver/r…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version	CPE status
ruvnet	sublinear-time-solver	Affected: < 1.6.0	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-55609",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T15:41:42.089174Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-26T15:41:54.869Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/BruceJqs/public_exp/issues/32"
          },
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/ruvnet/sublinear-time-solver/issues/19"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "sublinear-time-solver",
          "vendor": "ruvnet",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.6.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export_state and import_state tools in src/consciousness-explorer/mcp/server.js pass the attacker-controlled filepath parameter to filesystem operations in src/consciousness-explorer/index.js without restricting the destination or rejecting traversal. The saveVectorToFile and loadVectorFromFile tools in src/mcp/server.ts contain the same sink class through the file_path parameter. An attacker able to invoke the MCP tools can read, write, or overwrite any file accessible to the server process, causing confidentiality and integrity loss and possible service disruption. This issue is fixed in consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73: External Control of File Name or Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-25T18:34:47.633Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw"
        },
        {
          "name": "https://github.com/BruceJqs/public_exp/issues/32",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/BruceJqs/public_exp/issues/32"
        },
        {
          "name": "https://github.com/ruvnet/sublinear-time-solver/issues/19",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ruvnet/sublinear-time-solver/issues/19"
        },
        {
          "name": "https://github.com/ruvnet/sublinear-time-solver/pull/20",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ruvnet/sublinear-time-solver/pull/20"
        },
        {
          "name": "https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229"
        },
        {
          "name": "https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a"
        },
        {
          "name": "https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0"
        }
      ],
      "source": {
        "advisory": "GHSA-xc9g-j69q-37xw",
        "discovery": "UNKNOWN"
      },
      "title": "sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-55609",
    "datePublished": "2026-08-25T18:34:47.633Z",
    "dateReserved": "2026-06-16T23:31:22.445Z",
    "dateUpdated": "2026-08-26T15:41:54.869Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-55609",
      "date": "2026-08-28",
      "epss": "0.00118",
      "percentile": "0.01888"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-55609\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-08-25T19:16:50.160\",\"lastModified\":\"2026-08-26T16:16:28.327\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export_state and import_state tools in src/consciousness-explorer/mcp/server.js pass the attacker-controlled filepath parameter to filesystem operations in src/consciousness-explorer/index.js without restricting the destination or rejecting traversal. The saveVectorToFile and loadVectorFromFile tools in src/mcp/server.ts contain the same sink class through the file_path parameter. An attacker able to invoke the MCP tools can read, write, or overwrite any file accessible to the server process, causing confidentiality and integrity loss and possible service disruption. This issue is fixed in consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"ruvnet\",\"product\":\"sublinear-time-solver\",\"versions\":[{\"version\":\"\u003c 1.6.0\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-26T15:41:42.089174Z\",\"id\":\"CVE-2026-55609\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-73\"}]}],\"references\":[{\"url\":\"https://github.com/BruceJqs/public_exp/issues/32\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/ruvnet/sublinear-time-solver/issues/19\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/ruvnet/sublinear-time-solver/pull/20\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://github.com/BruceJqs/public_exp/issues/32\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\"},{\"url\":\"https://github.com/ruvnet/sublinear-time-solver/issues/19\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-55609\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-26T15:41:42.089174Z\"}}}], \"references\": [{\"url\": \"https://github.com/BruceJqs/public_exp/issues/32\", \"tags\": [\"exploit\"]}, {\"url\": \"https://github.com/ruvnet/sublinear-time-solver/issues/19\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-26T15:40:51.419Z\"}}], \"cna\": {\"title\": \"sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state\", \"source\": {\"advisory\": \"GHSA-xc9g-j69q-37xw\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.1, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"ruvnet\", \"product\": \"sublinear-time-solver\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 1.6.0\"}]}], \"references\": [{\"url\": \"https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw\", \"name\": \"https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/BruceJqs/public_exp/issues/32\", \"name\": \"https://github.com/BruceJqs/public_exp/issues/32\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/ruvnet/sublinear-time-solver/issues/19\", \"name\": \"https://github.com/ruvnet/sublinear-time-solver/issues/19\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/ruvnet/sublinear-time-solver/pull/20\", \"name\": \"https://github.com/ruvnet/sublinear-time-solver/pull/20\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229\", \"name\": \"https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a\", \"name\": \"https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0\", \"name\": \"https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export_state and import_state tools in src/consciousness-explorer/mcp/server.js pass the attacker-controlled filepath parameter to filesystem operations in src/consciousness-explorer/index.js without restricting the destination or rejecting traversal. The saveVectorToFile and loadVectorFromFile tools in src/mcp/server.ts contain the same sink class through the file_path parameter. An attacker able to invoke the MCP tools can read, write, or overwrite any file accessible to the server process, causing confidentiality and integrity loss and possible service disruption. This issue is fixed in consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-73\", \"description\": \"CWE-73: External Control of File Name or Path\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-08-25T18:34:47.633Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-55609\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-26T15:41:54.869Z\", \"dateReserved\": \"2026-06-16T23:31:22.445Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-08-25T18:34:47.633Z\", \"assignerShortName\": \"GitHub_M\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-55609

Vulnerability from fkie_nvd - Published: 2026-08-25 19:16 - Updated: 2026-08-26 16:16

Severity

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Summary

References

	URL	Tags
	security-advisories@github.com	https://github.com/BruceJqs/public_exp/issues/32
	security-advisories@github.com	https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229
	security-advisories@github.com	https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a
	security-advisories@github.com	https://github.com/ruvnet/sublinear-time-solver/issues/19
	security-advisories@github.com	https://github.com/ruvnet/sublinear-time-solver/pull/20
	security-advisories@github.com	https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0
	security-advisories@github.com	https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw
	134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/BruceJqs/public_exp/issues/32
	134c704f-9b21-4f2e-91b3-4a467353bcc0	https://github.com/ruvnet/sublinear-time-solver/issues/19

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "sublinear-time-solver",
          "vendor": "ruvnet",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.6.0"
            }
          ]
        }
      ],
      "source": "security-advisories@github.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export_state and import_state tools in src/consciousness-explorer/mcp/server.js pass the attacker-controlled filepath parameter to filesystem operations in src/consciousness-explorer/index.js without restricting the destination or rejecting traversal. The saveVectorToFile and loadVectorFromFile tools in src/mcp/server.ts contain the same sink class through the file_path parameter. An attacker able to invoke the MCP tools can read, write, or overwrite any file accessible to the server process, causing confidentiality and integrity loss and possible service disruption. This issue is fixed in consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0."
    }
  ],
  "id": "CVE-2026-55609",
  "lastModified": "2026-08-26T16:16:28.327",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-55609",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-26T15:41:42.089174Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-25T19:16:50.160",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/BruceJqs/public_exp/issues/32"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ruvnet/sublinear-time-solver/issues/19"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ruvnet/sublinear-time-solver/pull/20"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "url": "https://github.com/BruceJqs/public_exp/issues/32"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "url": "https://github.com/ruvnet/sublinear-time-solver/issues/19"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Received",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-73"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}

GHSA-XC9G-J69Q-37XW

Vulnerability from github – Published: 2026-08-25 18:35 – Updated: 2026-08-25 18:35

Summary

consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write

Details

Impact

An arbitrary file write vulnerability (CWE-73, External Control of File Name or Path) exists in the consciousness-explorer component of sublinear-time-solver. The MCP export_state (and import_state) tool accepted a user-supplied filepath argument and passed it directly to fs.writeFileSync / fs.readFileSync without constraining the destination or rejecting path traversal. An attacker able to invoke the MCP tool could write or overwrite any file accessible to the server process (e.g. ~/.ssh/authorized_keys, application files), leading to integrity loss and potential service disruption.

The same sink class was present in the main solver MCP server (saveVectorToFile / loadVectorFromFile).

Affected versions

consciousness-explorer < 1.1.2
sublinear-time-solver < 1.6.0
sublinear (crates.io) < 0.2.0

Patches

consciousness-explorer@1.1.2
sublinear-time-solver@1.6.0
sublinear@0.2.0

State/vector files are now confined to a dedicated directory (overridable via $CONSCIOUSNESS_EXPLORER_STATE_DIR / $SUBLINEAR_SOLVER_VECTOR_DIR), a basename-only contract is enforced (rejecting separators, .., NUL/control chars, hidden files, and Windows reserved names), and files are opened with O_NOFOLLOW | O_CLOEXEC mode 0o600. Covered by 14 regression tests in tests/consciousness/safe-path.test.mjs.

Breaking change: callers must now pass a basename, not an absolute path.

Workarounds

Do not expose the MCP server to untrusted clients; restrict export_state to trusted local users; run the server under a low-privilege account with a restricted working directory.

Severity

7.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "consciousness-explorer"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.1.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "npm",
        "name": "sublinear-time-solver"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.6.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-55609"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-73"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-08-25T18:35:32Z",
    "nvd_published_at": null,
    "severity": "HIGH"
  },
  "details": "### Impact\nAn arbitrary file write vulnerability (CWE-73, External Control of File Name or Path) exists in the `consciousness-explorer` component of `sublinear-time-solver`. The MCP `export_state` (and `import_state`) tool accepted a user-supplied `filepath` argument and passed it directly to `fs.writeFileSync` / `fs.readFileSync` without constraining the destination or rejecting path traversal. An attacker able to invoke the MCP tool could write or overwrite any file accessible to the server process (e.g. `~/.ssh/authorized_keys`, application files), leading to integrity loss and potential service disruption.\n\nThe same sink class was present in the main solver MCP server (`saveVectorToFile` / `loadVectorFromFile`).\n\n### Affected versions\n- `consciousness-explorer` \u003c 1.1.2\n- `sublinear-time-solver` \u003c 1.6.0\n- `sublinear` (crates.io) \u003c 0.2.0\n\n### Patches\n- `consciousness-explorer@1.1.2`\n- `sublinear-time-solver@1.6.0`\n- `sublinear@0.2.0`\n\nState/vector files are now confined to a dedicated directory (overridable via `$CONSCIOUSNESS_EXPLORER_STATE_DIR` / `$SUBLINEAR_SOLVER_VECTOR_DIR`), a basename-only contract is enforced (rejecting separators, `..`, NUL/control chars, hidden files, and Windows reserved names), and files are opened with `O_NOFOLLOW | O_CLOEXEC` mode `0o600`. Covered by 14 regression tests in `tests/consciousness/safe-path.test.mjs`.\n\n**Breaking change:** callers must now pass a basename, not an absolute path.\n\n### Workarounds\nDo not expose the MCP server to untrusted clients; restrict `export_state` to trusted local users; run the server under a low-privilege account with a restricted working directory.",
  "id": "GHSA-xc9g-j69q-37xw",
  "modified": "2026-08-25T18:35:32Z",
  "published": "2026-08-25T18:35:32Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw"
    },
    {
      "type": "WEB",
      "url": "https://github.com/BruceJqs/public_exp/issues/32"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ruvnet/sublinear-time-solver/issues/19"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ruvnet/sublinear-time-solver/pull/20"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/ruvnet/sublinear-time-solver"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-55609 (GCVE-0-2026-55609)

FKIE_CVE-2026-55609

GHSA-XC9G-J69Q-37XW

Impact

Affected versions

Patches

Workarounds

Tags

Sightings

Nomenclature