| 제목 | ravenwits mcp-server-arangodb 0.4.7 Path Traversal |
|---|
| 설명 | An arbitrary file write vulnerability (CWE-73) has been identified in mcp-server-arangodb version 0.4.7 (commit 3964a1f), specifically within the arango_backup MCP tool. The tool accepts a user‑supplied outputDir argument, resolves it with path.resolve, creates the directory, and writes JSON backup files there without constraining the destination to a safe backup root or validating path traversal. An attacker with network access to the MCP interface can write database backup files to arbitrary writable filesystem locations, leading to integrity loss and potential service disruption. No fixed version is available at the time of reporting. |
|---|
| 원천 | ⚠️ https://github.com/ravenwits/mcp-server-arangodb/issues/7 |
|---|
| 사용자 | BruceJqs (UID 97404) |
|---|
| 제출 | 2026. 04. 17. AM 10:05 (6 개월 ago) |
|---|
| 모더레이션 | 2026. 05. 03. AM 10:01 (16 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 360891 [ravenwits mcp-server-arangodb 까지 0.4.7 MCP Interface src/tools.ts arango_backup outputDir 디렉토리 순회] |
|---|
| 포인트들 | 20 |
|---|