Maamcp
Monthly
Path traversal in MAA-AI MaaMCP (versions up to 1.1.1.dev6+g2e4a41287) allows low-privileged remote users to read or write files outside the intended pipeline directory by supplying crafted path inputs to the save_pipeline and load_pipeline functions in pipeline_tools.py. Publicly available exploit code exists (referenced in GitHub issue #31), though no active exploitation has been confirmed by CISA KEV. The CVSS 4.0 score of 5.1 (Medium) reflects the authentication requirement and limited per-impact severity, but the public POC elevates practical risk above the base score alone.
Path traversal in MAA-AI MaaMCP (versions up to 1.1.1.dev6+g2e4a41287) allows low-privileged remote users to read or write files outside the intended pipeline directory by supplying crafted path inputs to the save_pipeline and load_pipeline functions in pipeline_tools.py. Publicly available exploit code exists (referenced in GitHub issue #31), though no active exploitation has been confirmed by CISA KEV. The CVSS 4.0 score of 5.1 (Medium) reflects the authentication requirement and limited per-impact severity, but the public POC elevates practical risk above the base score alone.