Designer Mcp
Monthly
A path traversal flaw in the designer-mcp MCP server (versions up to 2.1.0) lets a caller of the get_reference tool read files outside the bundled references directory by supplying a crafted reference name. Because the argument was concatenated directly into a path with a '.md' extension appended, exposure is limited to Markdown files and to low confidentiality impact - no write or availability effect. Exploitation requires the attacker to already hold access as a connected MCP client invoking the tool, and a public issue report (#14) referencing the flaw exists but is not verified working exploit code; there is no confirmation of active exploitation. The project ships rolling releases, so version-based guidance is unavailable and remediation is by commit c8c2951dcbed9b1710a745993f028317f10a3f10.
A path traversal flaw in the designer-mcp MCP server (versions up to 2.1.0) lets a caller of the get_reference tool read files outside the bundled references directory by supplying a crafted reference name. Because the argument was concatenated directly into a path with a '.md' extension appended, exposure is limited to Markdown files and to low confidentiality impact - no write or availability effect. Exploitation requires the attacker to already hold access as a connected MCP client invoking the tool, and a public issue report (#14) referencing the flaw exists but is not verified working exploit code; there is no confirmation of active exploitation. The project ships rolling releases, so version-based guidance is unavailable and remediation is by commit c8c2951dcbed9b1710a745993f028317f10a3f10.