sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.
Summary
sublinear-time-solver is a Rust and WebAssembly library for solving asymmetric diagonally dominant systems in sublinear time. Prior to consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0, the export_state and import_state tools in src/consciousness-explorer/mcp/server.js pass the attacker-controlled filepath parameter to filesystem operations in src/consciousness-explorer/index.js without restricting the destination or rejecting traversal. The saveVectorToFile and loadVectorFromFile tools in src/mcp/server.ts contain the same sink class through the file_path parameter. An attacker able to invoke the MCP tools can read, write, or overwrite any file accessible to the server process, causing confidentiality and integrity loss and possible service disruption. This issue is fixed in consciousness-explorer 1.1.2 and sublinear-time-solver 1.6.0.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ruvnet | sublinear-time-solver | before 1.6.0 | 1.6.0 | Patch available | CNA |
| — | consciousness-explorer (npm) | before 1.1.2 | 1.1.2 | Patch available | GHSA-xc9g-j69q-37xw |
| — | sublinear-time-solver (npm) | before 1.6.0 | 1.6.0 | Patch available | GHSA-xc9g-j69q-37xw |
- sublinear-time-solver Vendorruvnet Affected before 1.6.0 Fixed in 1.6.0 Patch available CNA
- consciousness-explorer (npm) Vendor— Affected before 1.1.2 Fixed in 1.1.2 Patch available GHSA-xc9g-j69q-37xw
- sublinear-time-solver (npm) Vendor— Affected before 1.6.0 Fixed in 1.6.0 Patch available GHSA-xc9g-j69q-37xw
Remediation
- Fix · CNA sublinear-time-solver (ruvnet) Fixed in 1.6.0
- Fix · GHSA-xc9g-j69q-37xw consciousness-explorer (npm) Fixed in 1.1.2 Advisory →
- Fix · GHSA-xc9g-j69q-37xw sublinear-time-solver (npm) Fixed in 1.6.0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-55609
- 2026-10-03 Alias added: GHSA-xc9g-j69q-37xw
References
Other 8
- https://github.com/ruvnet/sublinear-time-solver/security/advisories/GHSA-xc9g-j69q-37xw
- https://github.com/BruceJqs/public_exp/issues/32
- https://github.com/ruvnet/sublinear-time-solver/issues/19
- https://github.com/ruvnet/sublinear-time-solver/pull/20
- https://github.com/ruvnet/sublinear-time-solver/commit/a701296e363192be863e79d788fa268095e3d229
- https://github.com/ruvnet/sublinear-time-solver/commit/ea9a212b69e4449ec443fe088a7aec7546f70b4a
- https://github.com/ruvnet/sublinear-time-solver/releases/tag/v1.6.0
- https://github.com/ruvnet/sublinear-time-solver
More ruvnet vulnerabilities
- TI-2026-41910 OS command injection in ruvnet agentic-flow CVSS 3.1HIGH 8.8
- TI-2026-06727 ruvnet sublinear-time-solver MCP server.js export_state path traversal CVSS 4.0MEDIUM 6.9
- TI-2026-42595 Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment CVSS 3.1CRITICAL 10.0
Sources
- CVE-2026-55609 · CVE Program
- CVE-2026-55609 · NVD
- FIRST EPSS
- GHSA-xc9g-j69q-37xw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences