Description

A vulnerability was detected in iswalle getnote-mcp up to 1.5.0. The affected element is the function fs.readFileSync of the file src/index.ts of the component upload_image. Performing a manipulation of the argument image_path results in path traversal. The attack can be initiated remotely. The exploit is now public and may be used. Upgrading to version 1.5.1 is sufficient to fix this issue. The patch is named 7f9a215e03575c650d38c8f87fc6d8d363fed80d. Upgrading the affected component is advised.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "4.3",
  "pubDate": "2026-08-28T12:16:32.623Z",
  "pubdate": "2026-08-28T12:16:32.623Z",
  "executiveSummary": "A path traversal vulnerability has been identified in the getnote-mcp component, affecting versions up to 1.5.0.\nThe vulnerability resides in the upload_image functionality, specifically within the fs.readFileSync function located in src/index.ts.\nBy manipulating the image_path argument, an unauthenticated remote attacker can read arbitrary files from the host filesystem that the application process has permission to access.\nThis flaw poses a significant security risk as it allows for unauthorized data exfiltration, potentially exposing sensitive configuration files, credentials, or source code.\nThe exploit is currently public, increasing the likelihood of active exploitation. Immediate patching is required to mitigate this risk, as the issue is resolved in version 1.5.1.",
  "technicalDetails": "The vulnerability originates from an improper validation of user-supplied input provided to the image_path argument within the upload_image functionality.\nSpecifically, the application utilizes the fs.readFileSync function in src/index.ts to process file paths without sufficient sanitization or validation against directory traversal sequences (e.g., ../).\nIn a path traversal attack, an attacker supplies a malicious string containing dot-dot-slash sequences to traverse outside of the intended directory structure. Because the application fails to normalize the input or enforce a restricted directory scope, the underlying operating system resolves these sequences to target arbitrary files on the system.\nThe attack flow begins when an attacker sends a crafted request to the getnote-mcp component. By manipulating the image_path parameter, the attacker forces the fs.readFileSync operation to access a sensitive file instead of the intended image file.\nSince the application runs with the privileges of the service user, it will attempt to read the file requested by the attacker and potentially return its contents or process it in a way that reveals sensitive data.\nThis vulnerability is reachable remotely and does not require prior authentication, significantly lowering the barrier to entry for an attacker.\nPost-exploitation impact is severe, as the attacker can access any file readable by the process running getnote-mcp. This could lead to the exposure of environment variables, application secrets, SSH keys, or other system files that facilitate lateral movement or further system compromise.\nThe affected versions include all releases up to and including 1.5.0. The vulnerability is addressed in the upstream patch identified by the hash 7f9a215e03575c650d38c8f87fc6d8d363fed80d, which is integrated into version 1.5.1."
}