Mindpilot Mcp
Monthly
Path traversal in abrinsmead mindpilot-mcp 0.5.0 allows local low-privileged users to escape intended directory boundaries by supplying crafted path traversal sequences as the ID argument to the HistoryService component, enabling unauthorized file reads and writes within the process's permission scope. Publicly available proof-of-concept exploit code exists (E:P per CVSS 4.0 vector), and the vendor has not responded to coordinated disclosure via GitHub issue #24. No patch is available at time of analysis.
Path traversal in abrinsmead mindpilot-mcp 0.5.0 allows local low-privileged users to escape intended directory boundaries by supplying crafted path traversal sequences as the ID argument to the HistoryService component, enabling unauthorized file reads and writes within the process's permission scope. Publicly available proof-of-concept exploit code exists (E:P per CVSS 4.0 vector), and the vendor has not responded to coordinated disclosure via GitHub issue #24. No patch is available at time of analysis.