CyberRota Analysis
AI-GeneratedMCPVault versions prior to 0.11.5 are vulnerable due to a flaw in the PathFilter that allows attackers to bypass restrictions on nested directories, such as .git and .obsidian. This vulnerability could enable unauthorized access to sensitive files, including remote URLs and embedded tokens, potentially leading to data exposure or manipulation. Organizations using MCPVault should prioritize upgrading to version 0.11.5 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and node_modules path segments do not match the restriction and pass both isAllowed() and isAllowedForListing(). An attacker who influences a path selected by an AI agent can traverse nested repository or Obsidian metadata, read remote URLs or embedded tokens, or cause nested node_modules content to pollute the listAllTags index. This issue is fixed in version 0.11.5.