| शीर्षक | iswalle @getnote/mcp <= 1.5.0 Fixed after PR #11 Arbitrary Local File Read |
|---|
| विवरण | getnote-mcp before the security fix in PR #11 contains an arbitrary local file read vulnerability in the upload_image MCP tool. The tool accepts a user-controlled image_path parameter and passes it directly to fs.readFileSync() without validating that the resolved path is confined to an allowed directory.
An attacker able to invoke the upload_image tool can read arbitrary files accessible to the server process. The file contents are then uploaded to the configured GetNote object storage service, and the tool returns a public image URL referencing the uploaded file, allowing sensitive local files to be disclosed outside the host.
The vulnerability may be exploited by a malicious MCP client or through prompt injection against an MCP-enabled agent. The issue was fixed by validating image_path against an operator-configurable allowed root directory before reading the file. |
|---|
| स्रोत | ⚠️ https://github.com/iswalle/getnote-mcp/issues/10 |
|---|
| उपयोगकर्ता | Mcfly_Zhang (UID 98877) |
|---|
| सबमिशन | 13/07/2026 12:30 AM (2 महीनों पहले) |
|---|
| संयम | 28/08/2026 07:20 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 396502 [iswalle getnote-mcp तक 1.5.0 upload_image src/index.ts fs.readFileSync image_path निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|