Advanced Reasoning Mcp
Monthly
Path traversal in angrysky56 advanced-reasoning-mcp 1.0.0 exposes the local file system to read and write operations outside the application's intended directory scope. The vulnerable functions create_system_json, create_library, get_system_json, and switch_memory_library in src/index.ts accept user-controlled path inputs without adequate sanitization, enabling directory escape via traversal sequences. A proof-of-concept exists per the CVSS 4.0 E:P modifier; however, exploitation is constrained to local, low-privilege access, and the project maintainer has not yet responded to the disclosure.
Path traversal in angrysky56 advanced-reasoning-mcp 1.0.0 exposes the local file system to read and write operations outside the application's intended directory scope. The vulnerable functions create_system_json, create_library, get_system_json, and switch_memory_library in src/index.ts accept user-controlled path inputs without adequate sanitization, enabling directory escape via traversal sequences. A proof-of-concept exists per the CVSS 4.0 E:P modifier; however, exploitation is constrained to local, low-privilege access, and the project maintainer has not yet responded to the disclosure.