Ludusmcp
Monthly
Path traversal in NocteDefensor LudusMCP (all versions up to 1.0.24) enables a locally authenticated low-privilege user to read or overwrite files outside the intended directory by manipulating the configPath or outputPath arguments of the insert_creds_range_config tool. The flaw resides in src/tools/insertCredsRangeConfig.ts and is confined to local execution. Proof-of-concept exploit code exists (CVSS 4.0 E:P), and no patch has been released despite vendor notification via a public GitHub issue; no public exploit identified at time of analysis beyond the PoC.
Command injection in NocteDefensor LudusMCP through version 1.0.24 allows a local attacker with low privileges to execute arbitrary OS commands by supplying crafted input to the `command` or `args` parameters of the `executeArbitraryCommand` and `executeCommand` functions in `src/ludusMCP/cliWrapper.ts`. A proof-of-concept exploit is publicly referenced (CVSS 4.0 E:P; GitHub issue at gongyaugugyy/public_exp), and the vendor has not responded to the coordinated disclosure. No active exploitation has been confirmed via CISA KEV, but the public POC lowers the exploitation barrier for any local attacker on systems running this MCP server.
Path traversal in NocteDefensor LudusMCP up to version 1.0.24 allows a low-privileged local user to read files outside the intended directory by manipulating the guide_name argument in the ludus_environment_guides_search tool component (src/tools/ludusEnvironmentGuidesSearch.ts). All 25 tracked releases from 1.0.0 through 1.0.24 are affected. No patch has been released - the vendor was notified via GitHub issue but has not responded at time of analysis. No public exploit identified at time of analysis, though a separate public exploit report issue exists on GitHub (gongyaugugyy/public_exp), indicating the finding has been disclosed beyond the vendor.
Command injection in NocteDefensor LudusMCP (all versions through 1.0.24) permits a local low-privileged attacker to execute arbitrary OS commands by manipulating the Description argument passed to SecretDialog.showSecretDialog within the get_credential_from_user component (src/utils/secretDialog.ts). Exploitation is constrained to the local host and requires at minimum low-privilege OS credentials, consistent with the CVSS 4.0 AV:L/PR:L metrics and a final score of 1.9. A proof-of-concept exploit has been publicly posted (CVSS 4.0 E:P; GitHub issue at gongyaugugyy/public_exp), but no vendor patch has been released - the project has not responded to the coordinated disclosure as of this analysis.
Path traversal in NocteDefensor LudusMCP (all versions up to 1.0.24) enables a locally authenticated low-privilege user to read or overwrite files outside the intended directory by manipulating the configPath or outputPath arguments of the insert_creds_range_config tool. The flaw resides in src/tools/insertCredsRangeConfig.ts and is confined to local execution. Proof-of-concept exploit code exists (CVSS 4.0 E:P), and no patch has been released despite vendor notification via a public GitHub issue; no public exploit identified at time of analysis beyond the PoC.
Command injection in NocteDefensor LudusMCP through version 1.0.24 allows a local attacker with low privileges to execute arbitrary OS commands by supplying crafted input to the `command` or `args` parameters of the `executeArbitraryCommand` and `executeCommand` functions in `src/ludusMCP/cliWrapper.ts`. A proof-of-concept exploit is publicly referenced (CVSS 4.0 E:P; GitHub issue at gongyaugugyy/public_exp), and the vendor has not responded to the coordinated disclosure. No active exploitation has been confirmed via CISA KEV, but the public POC lowers the exploitation barrier for any local attacker on systems running this MCP server.
Path traversal in NocteDefensor LudusMCP up to version 1.0.24 allows a low-privileged local user to read files outside the intended directory by manipulating the guide_name argument in the ludus_environment_guides_search tool component (src/tools/ludusEnvironmentGuidesSearch.ts). All 25 tracked releases from 1.0.0 through 1.0.24 are affected. No patch has been released - the vendor was notified via GitHub issue but has not responded at time of analysis. No public exploit identified at time of analysis, though a separate public exploit report issue exists on GitHub (gongyaugugyy/public_exp), indicating the finding has been disclosed beyond the vendor.
Command injection in NocteDefensor LudusMCP (all versions through 1.0.24) permits a local low-privileged attacker to execute arbitrary OS commands by manipulating the Description argument passed to SecretDialog.showSecretDialog within the get_credential_from_user component (src/utils/secretDialog.ts). Exploitation is constrained to the local host and requires at minimum low-privilege OS credentials, consistent with the CVSS 4.0 AV:L/PR:L metrics and a final score of 1.9. A proof-of-concept exploit has been publicly posted (CVSS 4.0 E:P; GitHub issue at gongyaugugyy/public_exp), but no vendor patch has been released - the project has not responded to the coordinated disclosure as of this analysis.