Mcp File Context Server
Monthly
Path traversal in bsmi021's mcp-file-context-server 1.0.0 allows remote unauthenticated attackers to read arbitrary files on the host system by supplying crafted path arguments to the read_context function in src/index.ts. The Path Resolution component fails to canonicalize or boundary-check caller-supplied paths, enabling directory escape via sequences such as '../'. A public exploit exists (GitHub issue #15), the project maintainer has not responded to disclosure, and no vendor-released patch is available.
Path traversal in bsmi021's mcp-file-context-server 1.0.0 allows remote unauthenticated attackers to read arbitrary files on the host system by supplying crafted path arguments to the read_context function in src/index.ts. The Path Resolution component fails to canonicalize or boundary-check caller-supplied paths, enabling directory escape via sequences such as '../'. A public exploit exists (GitHub issue #15), the project maintainer has not responded to disclosure, and no vendor-released patch is available.