Executive brief
alioshr memory-bank-mcp is a tool used to manage remote memory banks for AI models. A security flaw allows a local user to bypass project isolation and view the names of files and directories outside of the intended storage area. While this does not allow an attacker to read the contents of those files, it exposes sensitive information about the system's file structure and the existence of private data.
Technical details
A path traversal vulnerability exists in the list_project_files tool of alioshr memory-bank-mcp due to missing input validation. The root cause is located in list-project-files-validation-factory.ts, which fails to implement the PathSecurityValidator used by other tools in the suite. By supplying a projectName argument containing '../' sequences, a local attacker can escape the MEMORY_BANK_ROOT directory. This allows for directory enumeration (readdir) of the host filesystem, though it does not grant direct file read or write access. As of the advisory date, the project maintainers have been notified but a patch has not been confirmed.
Affected products
- alioshr memory-bank-mcp up to 0.2.1, 3.1
Timeline
- 2026-07-13: advisory: NVD publication date
- 2026-07-12: disclosed: Public issue report on GitHub