Executive brief
mcp-file-analyzer is a Model Context Protocol server that allows AI assistants to analyze local CSV and Parquet files. A path traversal vulnerability in the analyze_csv_data function allows attackers to read arbitrary files accessible to the server process by supplying absolute paths or path traversal sequences, potentially exposing sensitive system files like /etc/passwd.
Technical details
CWE-22 path traversal flaw in main.py's analyze_csv_data function fails to validate that user-supplied filename arguments remain within the intended DATA_DIR after path joining. An attacker with network access to the MCP interface can exploit this via absolute paths or traversal sequences to read arbitrary text files through pandas.read_csv. The vulnerability affects all versions before commit 84740852f0cf0cf5db4781b1ca6d7c6a6d210405; the project uses rolling release and has not responded to the responsible disclosure.
Affected products
- 00Kisumi00 mcp-file-analyzer before commit 84740852f0cf0cf5db4781b1ca6d7c6a6d210405
Timeline
- 2026-08-26: disclosed
- 2026-09-20: advisory