| शीर्षक | arben-adm mcp-sequential-thinking <= 0.5.0 Fixed in 0.6.0 Path Traversal |
|---|
| विवरण | mcp-sequential-thinking before version 0.6.0 contains a path traversal vulnerability in the import_session and export_session MCP tools. Both tools accept a user-controlled file_path parameter and use it directly for filesystem operations without validating that the resolved path remains within the configured storage directory.
An attacker able to invoke these MCP tools can read attacker-selected JSON files, overwrite arbitrary writable files with attacker-controlled JSON content, and create arbitrary directories and lock files outside the intended storage location. This may result in arbitrary file overwrite, information disclosure, denial of service, or persistence depending on the targeted file.
The vulnerability is fixed in version 0.6.0 by restricting file operations to the configured storage directory. |
|---|
| स्रोत | ⚠️ https://github.com/arben-adm/mcp-sequential-thinking/issues/17 |
|---|
| उपयोगकर्ता | Mcfly_Zhang (UID 98877) |
|---|
| सबमिशन | 13/07/2026 12:22 AM (2 महीनों पहले) |
|---|
| संयम | 27/08/2026 06:07 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 396171 [arben-adm mcp-sequential-thinking तक 0.5.0 Import Session/Export Session server.py import_session/export_session file_path निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|