| Título | bsmi021 mcp-file-context-server 1.0.0 Arbitrary File Read |
|---|
| Descrição | The bsmi021/mcp-file-context-server MCP server exposes file context tools such as read_context that accept a caller-controlled path argument. The server resolves the supplied path against process.cwd() and checks whether it is accessible, but it does not enforce that the resolved path remains inside an intended workspace or project directory.
In a local reproduction, a test file was created outside the repository directory and the read_context tool was invoked with a traversal path such as ../outside-poc/outside-secret.txt. The tool returned the marker contained in that external file, confirming that the MCP server read a file outside the intended working directory.
This demonstrates an arbitrary file read / workspace escape issue. An MCP client or agent that can control tool arguments may cause the server process to read local files accessible to its operating-system user. Depending on deployment configuration and filesystem permissions, this may expose sensitive files such as configuration files, credentials, source code, or user-profile data. |
|---|
| Fonte | ⚠️ https://github.com/bsmi021/mcp-file-context-server/issues/15 |
|---|
| Utilizador | cccccccti (UID 96695) |
|---|
| Submissão | 12/07/2026 17h20 (há 2 meses) |
|---|
| Moderação | 26/08/2026 22h20 (2 months later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 395980 [bsmi021 mcp-file-context-server 1.0.0 Path Resolution src/index.ts read_context path Travessia de Diretório] |
|---|
| Pontos | 20 |
|---|