Description

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-08-09T07:17:02.763Z",
  "pubdate": "2026-08-09T07:17:02.763Z",
  "executiveSummary": "A path traversal vulnerability has been identified in automateyournetwork MCPyATS up to version 0.1.4, specifically within the generate_mermaid_markdown component.\nThe flaw exists in the processGenerateRequest function located in mcp_servers/mermaid/index.ts.\nThis vulnerability allows a local attacker to manipulate the folder or name arguments, resulting in arbitrary file system access or manipulation beyond the intended directory scope.\nThe risk implication involves unauthorized file operations within the context of the running application.\nSuccessful exploitation requires local access to the system and the ability to interact with the vulnerable component.\nNo specific authentication requirements or network exposure vectors are mandated by the vulnerability description, classifying the threat vector as local.",
  "technicalDetails": "The vulnerability resides in the mcp_servers/mermaid/index.ts file, specifically inside the processGenerateRequest function associated with the generate_mermaid_markdown component of automateyournetwork MCPyATS up to 0.1.4.\nThe root cause of the path traversal vulnerability stems from insufficient input sanitization and validation of user-supplied parameters, specifically the folder and name arguments.\nWhen processGenerateRequest handles these arguments to construct file system paths for saving or processing Mermaid markdown artifacts, it fails to properly neutralize directory traversal sequences such as dot-dot-slash (../).\nAn attacker with local execution capabilities can supply maliciously crafted input containing traversal sequences within the folder/name arguments.\nStep-by-step, the attack flow proceeds as follows: First, the local attacker invokes the generate_mermaid_markdown component. Second, the attacker injects path traversal payloads into the vulnerable folder or name parameters processed by processGenerateRequest. Third, the application resolves the resulting path without adequately restricting operations to the designated base directory. Fourth, the application attempts to read, write, or interact with files outside the intended security perimeter based on the manipulated path.\nThe affected versions include automateyournetwork MCPyATS up to 0.1.4.\nThe vulnerability requires local access to the target system and does not rely on remote network exposure.\nPost-exploitation impact is constrained by the privilege level of the process executing the MCPyATS component, potentially leading to unauthorized file read or write actions on the host filesystem."
}