Mail Mcp Bridge
Monthly
Path traversal in fatbobman mail-mcp-bridge versions 1.3.0 through 1.3.3 exposes arbitrary filesystem paths to remote unauthenticated attackers via unsanitized `message_ids` arguments in the MCP server's attachment management functions. The vulnerable code in `cleanup_attachments.py` and `extract_attachments.py` directly concatenated email Message-ID values onto a base filesystem path without validation, allowing sequences such as `../../etc` to escape the intended attachment directory. A public exploit exists (GitHub issue #2), SSVC rates the attack as automatable, and vendor-released fix version 1.3.4 is available.
Path traversal in fatbobman mail-mcp-bridge versions 1.3.0 through 1.3.3 exposes arbitrary filesystem paths to remote unauthenticated attackers via unsanitized `message_ids` arguments in the MCP server's attachment management functions. The vulnerable code in `cleanup_attachments.py` and `extract_attachments.py` directly concatenated email Message-ID values onto a base filesystem path without validation, allowing sequences such as `../../etc` to escape the intended attachment directory. A public exploit exists (GitHub issue #2), SSVC rates the attack as automatable, and vendor-released fix version 1.3.4 is available.