Executive brief
Hulupeep mcp-ui-probe is a Model Context Protocol server for automated UI testing. The tool accepts file path parameters (journeyId and filename) without proper validation, allowing an attacker with local access to read, delete, or write files outside the intended storage directories. This could lead to unauthorized access to sensitive files or system interference.
Technical details
The vulnerability is a path traversal flaw in src/journey/JourneyStorage.ts and src/monitoring/usageTracker.ts. The affected functions (get_journey, delete_journey, analyze_journey, usage_stats) join user-supplied journeyId and filename parameters directly into file paths using path.join() without subsequent validation that the resolved path remains within the intended base directory. An attacker can inject path traversal sequences (e.g., ../../../) to escape containment. The attack vector is local; no network access is required. An attacker can read arbitrary files from the filesystem, delete files outside the journey directory, or write usage-export files to arbitrary locations. The project has not yet responded to the early disclosure.
Affected products
- Hulupeep mcp-ui-probe up to 0.2.0
Timeline
- 2026-04-27: disclosed: Issue #1 opened by gongyaugugyy on GitHub
- 2026-08-08: advisory: CVE-2026-19270 published