mcp-file-analyzer Path Traversal Arbitrary File Read Vulnerability Analysis and PoC

Vulnerability Summary: mcp-file-analyzer Path Traversal Vulnerability Vulnerability Overview Vulnerability Type: Path Traversal / Arbitrary File Read CVE ID: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory) Vulnerability Description: When processing requests, the tool fails to validate whether the user-supplied parameter is located within the expected data directory. An attacker can supply absolute paths or path traversal sequences (such as ) to read any local file accessible by the server process (e.g., ). Risk Level: High (CVSS 3.1: 7.5) Affected Scope Affected Product: Affected Versions: All versions prior to commit Affected Component: Affected Function: Remediation 1. Path Validation: Parse and the requested path, using to ensure that the resolved target path remains within before opening the file. 2. Input Restrictions: Limit accepted file types (e.g., only), reject absolute path inputs, and handle path traversal and symbolic link escape attempts. 3. Permission Controls: Run the server with minimal file system permissions. 4. Testing: Add regression tests covering absolute paths, sequences, and symbolic links pointing outside . POC / Exploit Code 1. Vulnerability Exploitation Payload (JSON) 2. Complete Exploitation Steps (MCP Inspector) Step 1: Start the affected service Step 2: In MCP Inspector, click "List Tools", select the tool, click "Run Tool", and send the following request: Step 3: Verification The server returns and includes the content of in the structured response. This confirms that the attacker-controlled absolute path escaped , and that can leak local files readable by the server process.

Goal Reached Thanks to every supporter — we hit 100%!

mcp-file-analyzer Path Traversal Arbitrary File Read Vulnerability Analysis and PoC

More from this source