| शीर्षक | j3k0 mcp-google-workspace 1.0.0 Arbitrary File Write |
|---|
| विवरण | An arbitrary file write vulnerability has been identified in mcp-google-workspace. Gmail attachment retrieval and bulk-save logic accepts caller-controlled local save paths and passes them to fs.writeFileSync after a helper named validateSavePath. The helper resolves the path but does not enforce a safe base directory or approved downloads directory. An attacker able to invoke the affected MCP tool can write decoded attachment content to arbitrary local paths writable by the server process. |
|---|
| स्रोत | ⚠️ https://github.com/j3k0/mcp-google-workspace/issues/19 |
|---|
| उपयोगकर्ता | ccccccctfi (UID 97498) |
|---|
| सबमिशन | 11/05/2026 10:27 AM (5 महीनों पहले) |
|---|
| संयम | 31/05/2026 06:06 PM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 367570 [j3k0 mcp-google-workspace तक 831790e7d5c2663325733d9f5579cc339a267c4c MCP Gmail Tool src/tools/gmail.ts saveToDisk अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|