CVE-2026-81486

Name of the Vulnerable Software and Affected Versions bsmi021 mcp-file-context-server version 1.0.0

Description A path traversal issue exists in the Path Resolution component. A remote attacker can manipulate the path argument within the read context() function located in the src/index.ts file to access files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly validated.

Recommendations As a temporary workaround, restrict the use of the read context() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.