Executive brief
Adobe XD MCP is a tool that allows AI assistants to read Adobe XD design files and generate code components. A path traversal vulnerability in the file-access endpoints allows an attacker to read arbitrary files from the system or write files to any location, potentially exposing sensitive data or modifying critical system files.
Technical details
The vulnerability is a path traversal (CWE-22) in the Adobe XD MCP server affecting the file-access-from-request endpoints. The tools `get_xd_info`, `generate_react_component`, and `extract_colors` accept caller-controlled path, outputDir, and outputFile arguments and pass them directly to fs.readFile() and fs.writeFile() operations in src/parsers/xd-parser.ts and src/tools/xd-tools.ts without validating that they remain within a restricted workspace directory. An attacker with network access to invoke the MCP server can read arbitrary local files (e.g., /etc/passwd or configuration files) or write malicious files to any filesystem location accessible to the server process. No authentication, authorization, or input validation is enforced on these endpoints. The vulnerability is confirmed in version 1.0.0 with no patch available as of the report date.
Affected products
- dekdee adobe-xd-mcp 1.0.0
Timeline
- 2026-07-12: disclosed: Vulnerability reported via GitHub issue #3
- 2026-08-25: advisory: CVE-2026-79622 published