Rive Mcp Server Core
Monthly
Path traversal in astralisone's rive-mcp-server-core MCP server allows local low-privileged users to escape the intended directory boundary by supplying crafted sequences in the `libraryId` argument of the importRiveFile flow, enabling unauthorized read and partial write access to files on the host system. All commits up to db1d0cc4cd52589116360428b7504fd0ca748b3e of the rolling-release project are affected, with no vendor patch issued and no vendor response to disclosure at time of analysis. A proof-of-concept exploit exists (CVSS 4.0 E:P), though no confirmed active exploitation (CISA KEV) has been reported.
Path traversal in astralisone's rive-mcp-server-core MCP server allows local low-privileged users to escape the intended directory boundary by supplying crafted sequences in the `libraryId` argument of the importRiveFile flow, enabling unauthorized read and partial write access to files on the host system. All commits up to db1d0cc4cd52589116360428b7504fd0ca748b3e of the rolling-release project are affected, with no vendor patch issued and no vendor response to disclosure at time of analysis. A proof-of-concept exploit exists (CVSS 4.0 E:P), though no confirmed active exploitation (CISA KEV) has been reported.