Mcpyats
Monthly
Path traversal in MCPyATS up to version 0.1.4 enables a local low-privileged attacker to escape the intended working directory by supplying crafted `folder` or `name` arguments to the `processGenerateRequest` function within the `generate_mermaid_markdown` MCP tool. The CVSS 4.0 vector (AV:L/PR:L/E:P) confirms local-only exploitation requiring low privileges, with a proof-of-concept publicly disclosed via VulDB. This CVE is not listed in CISA KEV, indicating no confirmed active exploitation in the wild at time of analysis.
Path traversal in MCPyATS up to version 0.1.4 enables a local low-privileged attacker to escape the intended working directory by supplying crafted `folder` or `name` arguments to the `processGenerateRequest` function within the `generate_mermaid_markdown` MCP tool. The CVSS 4.0 vector (AV:L/PR:L/E:P) confirms local-only exploitation requiring low privileges, with a proof-of-concept publicly disclosed via VulDB. This CVE is not listed in CISA KEV, indicating no confirmed active exploitation in the wild at time of analysis.