Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

PyPI package

neuro-cortex-memory

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 7.1PyPIAmendedPublished

    Cortex has Untrusted Project Bootstrap Code Execution via CLAUDE_PROJECT_DIR

    CVE-2026-49986 · GHSA-gvpp-v77h-5w8g

    Affected
    • PyPI neuro-cortex-memory <= 3.17.0
    Fixed in
    3.18.0· Vendor fix available
    Issue
    Untrusted Project Bootstrap Code Execution via CLAUDEPROJECTDIR Summary The Cortex MCP server (neuro-cortex-memory) treats the CLAUDEPROJECTDIR environment variable — automatically set by Claude Code to the currently open project directory — as a trusted Cortex developer checkout. When the openvisualization tool is invoked, finddevsource() resolves the user's active project directory as a candidate Cortex source root. The only validation performed by iscortexroot() is a check for the presence of an mcpserver/ subdirectory and a ui/unified-viz.html file. An attacker who places these two marker files in a malicious repository can cause Cortex to execute an arbitrary mcpserver/server/visualizebootstrap.py from that directory via subprocess.run([sys.executable, ...]), achieving code execution with the privileges of the victim's local user process. CVSS v3.1 Base Score: 7.8 (High). Details The vulnerability originates in finddevsource() inside mcpserver/handlers/openvisualization.py. The…

    Recommended action: Upgrade to 3.18.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →