Skill Ninja Mcp Server
Monthly
Path traversal in aktsmm skill-ninja-mcp-server 0.1.0 exposes four installer functions - getInstalledSkills, installSkill, updateAgentsMd, and uninstallSkill - in src/installer.ts to directory escape via an unsanitized workspacePath argument. The CVSS 4.0 vector (AV:L/PR:L) confirms exploitation is strictly local and requires low-privilege OS access, substantially limiting opportunistic reach. A patched release (v0.1.1) is available on GitHub; the E:P supplemental metric signals proof-of-concept exploit code exists, though no active exploitation has been confirmed by CISA KEV.
Path traversal in aktsmm skill-ninja-mcp-server 0.1.0 exposes four installer functions - getInstalledSkills, installSkill, updateAgentsMd, and uninstallSkill - in src/installer.ts to directory escape via an unsanitized workspacePath argument. The CVSS 4.0 vector (AV:L/PR:L) confirms exploitation is strictly local and requires low-privilege OS access, substantially limiting opportunistic reach. A patched release (v0.1.1) is available on GitHub; the E:P supplemental metric signals proof-of-concept exploit code exists, though no active exploitation has been confirmed by CISA KEV.