Mcp K6
Monthly
Path traversal in the k6 MCP server (packaged by Grafana, CPE cpe:2.3:a:grafana:mcp_k6) lets a caller who can already invoke prompts on the server read arbitrary files as the OS user running the server. The convert_playwright_script prompt is documented to accept a script path in '@'-prefixed form, which is confined to the server's working directory, but bare paths and '~'-prefixed paths are handled by a separate undocumented code path that applies no restriction and expands '~' to the user's home directory, making files such as SSH private keys directly addressable; the '@' restriction can also be bypassed with a symlink inside the working directory pointing outside it. All releases from v0.3.0 onward are affected, and v0.3.0/v0.4.0 enforce no restriction on either path form; there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis, and the impact is bounded by the requirement for prompt-invocation privileges (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).
Path traversal in the k6 MCP server (packaged by Grafana, CPE cpe:2.3:a:grafana:mcp_k6) lets a caller who can already invoke prompts on the server read arbitrary files as the OS user running the server. The convert_playwright_script prompt is documented to accept a script path in '@'-prefixed form, which is confined to the server's working directory, but bare paths and '~'-prefixed paths are handled by a separate undocumented code path that applies no restriction and expands '~' to the user's home directory, making files such as SSH private keys directly addressable; the '@' restriction can also be bypassed with a symlink inside the working directory pointing outside it. All releases from v0.3.0 onward are affected, and v0.3.0/v0.4.0 enforce no restriction on either path form; there is no confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis, and the impact is bounded by the requirement for prompt-invocation privileges (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).