Xh1Xxhg

A vulnerability was identified in 0xshariq github-mcp-server up to 52e764a7d66eac1726fce02ca7bb5a638571801a. This issue affects the function child process.exec of the file src/github.ts of the component Git Remove MCP Tool. Such manipulation of the argument File leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.

A flaw has been found in zosmaai pi-llm-wiki up to 0.11.7. Affected is an unknown function of the file mcp/index.ts of the component wiki capture source MCP tool. Executing a manipulation of the argument url can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 0.11.8 is able to address this issue. This patch is called 360867034e79175b45c8e04a98e4ca712bbaca35. Upgrading the affected component is advised.

**Name of the Vulnerable Software and Affected Versions** 0-Gaurav-0 nexus-mcp (affected versions not specified) **Description** Command injection is possible in the nexus reauth MCP tool within the file src/auth/browser.ts. The issue occurs when the `url` argument is passed to the `child process.exec()` function, allowing a remote attacker to execute arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `child process.exec()` function in the src/auth/browser.ts file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** 00Kisumi00 mcp-file-analyzer versions up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405 **Description** A path traversal issue exists in the `analyze csv data` MCP tool within the `ControlFlowNode()` function of the `main.py` file. This occurs when the `filename` argument is manipulated, allowing for remote exploitation. **Recommendations** As a temporary workaround, restrict the use of the `filename` argument in the `ControlFlowNode()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 03-lovepreetSingh MCP versions up to f95d035c5317fad81af9828286631053ccb23546 **Description** A remote path traversal issue exists in the `create file()` function within the 'app/api/mcp/route.ts' file. This occurs when the `filePath` or `content` arguments are manipulated, allowing an attacker to access or create files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder. **Recommendations** As a temporary workaround, restrict the use of the `create file()` function in the 'app/api/mcp/route.ts' file until a fix is provided.

**Name of the Vulnerable Software and Affected Versions** 0215AndrewFeng ACE-MCP versions prior to 4.10.9 **Description** A path traversal issue exists in the MCP Tool component within the `get file snippet()` function of the `getFileSnippet.ts` file. This flaw allows a remote attacker to access files outside the intended directory by manipulating the `projectRootPath` and `filePath` arguments. The issue occurs because the `isPathInsideProjectRoot` validation only prevents the `filePath` from escaping the `projectRootPath`, but it does not validate the `projectRootPath` itself, which is provided as untrusted client input. **Recommendations** As a temporary workaround, restrict or avoid using the `projectRootPath` and `filePath` arguments in the `get file snippet()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 06ketan slideshot versions prior to 4.4.1 **Description** A path traversal flaw exists in the `render slides()` function within the `packages/cli/src/renderer.ts` file. This issue occurs when the `htmlPath` argument is manipulated, allowing a remote attacker to access files or directories outside the intended folder. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly validated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `htmlPath` argument in the `render slides()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** 0717376 cowork bench versions up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d **Description** In the pdf-tools-mcp component, the `ControlFlowNode()` function within the file local servers/pdf-tools-mcp/pdf tools mcp/server.py is susceptible to server-side request forgery (SSRF). This occurs when the `pdf file path` argument is manipulated, allowing a remote attacker to initiate unauthorized requests from the server. **Recommendations** As a temporary workaround, restrict the use of the `pdf file path` argument in the `ControlFlowNode()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.