| Название | bsmi021 mcp-file-context-server 1.0.0 Arbitrary File Read |
|---|
| Описание | The bsmi021/mcp-file-context-server MCP server exposes file context tools such as read_context that accept a caller-controlled path argument. The server resolves the supplied path against process.cwd() and checks whether it is accessible, but it does not enforce that the resolved path remains inside an intended workspace or project directory.
In a local reproduction, a test file was created outside the repository directory and the read_context tool was invoked with a traversal path such as ../outside-poc/outside-secret.txt. The tool returned the marker contained in that external file, confirming that the MCP server read a file outside the intended working directory.
This demonstrates an arbitrary file read / workspace escape issue. An MCP client or agent that can control tool arguments may cause the server process to read local files accessible to its operating-system user. Depending on deployment configuration and filesystem permissions, this may expose sensitive files such as configuration files, credentials, source code, or user-profile data. |
|---|
| Источник | ⚠️ https://github.com/bsmi021/mcp-file-context-server/issues/15 |
|---|
| Пользователь | cccccccti (UID 96695) |
|---|
| Представление | 12.07.2026 17:20 (2 месяцы назад) |
|---|
| Модерация | 26.08.2026 22:20 (2 months later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 395980 [bsmi021 mcp-file-context-server 1.0.0 Path Resolution src/index.ts read_context path обход каталога] |
|---|
| Баллы | 20 |
|---|