إرسال #806895: ruvnet sublinear-time-solver / consciousness-explorer sublinear-time-solver 1.5.0, consciousness-explorer 1.1.1, commit 1210646955f33abe5c91f894cc7b04d024f62408 Path Traversalالمعلومات

عنوانruvnet sublinear-time-solver / consciousness-explorer sublinear-time-solver 1.5.0, consciousness-explorer 1.1.1, commit 1210646955f33abe5c91f894cc7b04d024f62408 Path Traversal
الوصفAn arbitrary file write vulnerability (CWE-73) has been identified in the consciousness-explorer component of sublinear-time-solver, specifically within the MCP export_state tool. The tool accepts a user‑supplied filepath argument and writes JSON state data to that path using fs.writeFileSync without constraining the destination to a safe directory or validating path traversal sequences. An attacker with network access to the MCP interface can write or overwrite arbitrary files accessible to the server process, leading to integrity loss and potential service disruption. Version 1.1.1 of consciousness-explorer (commit 1210646) is confirmed affected, and no fixed version is available at the time of reporting.
المصدر⚠️ https://github.com/ruvnet/sublinear-time-solver/issues/19
المستخدم
 BruceJqs (UID 97404)
ارسال17/04/2026 09:21 AM (2 أشهر منذ)
الاعتدال01/05/2026 06:36 PM (14 days later)
الحالةتمت الموافقة
إدخال VulDB360757 [ruvnet sublinear-time-solver 1.5.0 MCP Interface server.js export_state اجتياز الدليل]
النقاط20

Do you know our Splunk app?

Download it now for free!