Description
A flaw has been found in elinsky execution-system-mcp 0.1.0. The impacted element is the function _get_context_file_path of the file src/execution_system_mcp/server.py of the component add_action Tool. This manipulation of the argument context causes path traversal. The attack can be initiated remotely. The exploit has been published and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| elinsky | execution-system-mcp | 0.1.0 | — |
References
- VDB-359972 | elinsky execution-system-mcp add_action Tool server.py _get_context_file_path path traversal vdb-entry technical-description
- VDB-359972 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #803085 | elinsky execution-system-mcp 0.1.0 Path Traversal third-party-advisory
- https://github.com/elinsky/execution-system-mcp/issues/1 exploit issue-tracking
- https://github.com/elinsky/execution-system-mcp/ product