Mcp Bases
Monthly
Path traversal in ezequiroga/mcp-bases `search_papers` function allows unauthenticated remote attackers to read and potentially write files outside the intended directory by supplying crafted `../` sequences in the `topic` argument to research_server.py. Two specific commits (357ca19 and c630b8a) are confirmed affected; the project's rolling release model means no versioned fix exists and the maintainer had not responded to disclosure at time of reporting. A public proof-of-concept exploit is available via GitHub, and SSVC rates exploitation as automatable with partial technical impact - a notable combination despite the low EPSS of 0.05%.
Path traversal in ezequiroga/mcp-bases `search_papers` function allows unauthenticated remote attackers to read and potentially write files outside the intended directory by supplying crafted `../` sequences in the `topic` argument to research_server.py. Two specific commits (357ca19 and c630b8a) are confirmed affected; the project's rolling release model means no versioned fix exists and the maintainer had not responded to disclosure at time of reporting. A public proof-of-concept exploit is available via GitHub, and SSVC rates exploitation as automatable with partial technical impact - a notable combination despite the low EPSS of 0.05%.