Executive brief
A vulnerability was found in engineer-your-data, a tool used for managing data workspaces. The software fails to restrict file operations to the intended workspace directory, allowing a remote user to read or write sensitive files anywhere on the host system. This could lead to the exposure of private data or the corruption of critical system files.
Technical details
A path traversal vulnerability exists in eghuzefa engineer-your-data (specifically the MCP server) up to version 0.1.3. The functions read_file, write_file, list_files, and file_info in src/server.py and src/tools/file_operations.py accept arbitrary file paths without validating them against the configured WORKSPACE_PATH. An attacker can provide absolute paths or traversal sequences (e.g., ../) to access or modify files outside the intended directory. This can be exploited remotely if the Model Context Protocol (MCP) interface is exposed, allowing for unauthorized file disclosure and modification. As of the advisory date, no official patch has been released.
Affected products
- eghuzefa engineer-your-data-mcp up to 0.1.3
Timeline
- 2026-04-10: disclosed: Vulnerability reported to the vendor via GitHub issue.
- 2026-04-28: advisory: NVD/VulDB advisory published.