Skip to content
OpenAdvisories

Package · npm

faf-mcp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-j4r7-8ph4-43g3

    faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

    ### Summary `faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.resolve()`) straight into a filesystem read/write **without confining it to a trusted project directory**. An absolute path or `../` traversal is …

    faf-mcp npm