Description

A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted element is an unknown function of the file src/index.ts of the component upscale_images. Such manipulation of the argument output_path leads to path traversal. The attack must be carried out locally. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-08-09T19:17:00.970Z",
  "pubdate": "2026-08-09T19:17:00.970Z",
  "executiveSummary": "A path traversal vulnerability has been identified in Ichigo3766 image-gen-mcp version 0.1.0, specifically within the upscale_images component located in src/index.ts. This security flaw arises from improper validation of user-supplied input passed to the output_path argument, allowing malicious actors to traverse the filesystem and write files to arbitrary locations outside the intended directory.\nThe vulnerability carries significant risk implications, as successful exploitation enables local attackers to overwrite critical system files or place malicious artifacts within sensitive directories depending on the privileges of the executing process. The attack vector requires local execution capabilities and direct interaction with the upscale_images component. At the time of analysis, the project maintainers have been notified via an issue report but have not yet provided a vendor response or official patch.",
  "technicalDetails": "The vulnerability resides in the src/index.ts file of the upscale_images component within the Ichigo3766 image-gen-mcp 0.1.0 package. The root cause of the issue is inadequate sanitization and validation of the output_path argument before it is utilized in file system operations. When an upscale operation is triggered, the application directly processes the user-controlled path parameter without properly enforcing boundary constraints or neutralizing directory traversal sequences such as dot-dot-slash (../).\nTo exploit this vulnerability, an attacker must have local access to the system executing the Model Context Protocol (MCP) server. The attack flow begins when the adversary invokes the upscale_images function and crafts a malicious payload containing relative path specifiers within the output_path argument. Because the application fails to restrict file writes to a designated safe directory, the underlying file system APIs resolve the traversal sequences, causing the resulting upscaled image data to be written to an arbitrary destination accessible to the process.\nThe affected version is strictly 0.1.0. The vulnerability requires local access and does not mandate pre-existing authentication if the local execution environment exposes the MCP tool interface without access controls. Depending on the execution context and privileges of the host process, successful exploitation can lead to unauthorized file overwrites, potential configuration tampering, or the placement of executable payloads in sensitive file system locations."
}