Flux159/mcp-game-asset-gen

Flux159/mcp-game-asset-gen

GitHubGitHub
GitHubgithub.com
NPMwww.npmjs.com
Releases10
Frequency3 days 2 hours
Last Release
Stars18
Asset generation MCP server for Three.js and game engines
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-7594↗
7.3 HIGH7.5 HIGH

A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0. Affected is the function image_to_3d_async of the file src/index.ts of the component MCP Interface. The manipulation of the argument statusFile results in path traversal. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.