CVE-2026-14702

Low

Description

A flaw has been found in zcaceres markdownify-mcp up to 1.1.0. This impacts the function saveToTempFile of the file src/Markdownify.ts of the component webpage-to-markdown/youtube-to-markdown/bing-search-to-markdown. This manipulation causes insufficiently random values. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitability is said to be difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

SeverityLow

CVSS2.5

Exploit probability—

ProductZcaceres Markdownify-mcp

PublishedJul 5, 2026

First seenJul 5, 2026

Weakness typeCWE-330CWE-330 CWE-310CWE-310

How to fix

Patches

github.com/zcaceres/markdownify-mcp/pull/111

Affected products

Product	Affected versions	Fixed in
zcaceres markdownify-mcp	1.0, 1.1.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.