Executive brief
dazeb cline-mcp-memory-bank is a memory system used to track progress between conversations in AI-assisted development. A security flaw allows a remote attacker to manipulate file paths, potentially leading to unauthorized reading or writing of files on the host system. This could result in the exposure of sensitive project data or the modification of critical system files.
Technical details
A path traversal vulnerability exists in the handleInitializeMemoryBank function (and others including handleUpdateContext and handleRecordDecision) within src/index.ts. The application accepts a user-controlled 'projectPath' argument from Model Context Protocol (MCP) request arguments and uses it in path.join() without sufficient validation or boundary checks. An attacker can provide a manipulated path (e.g., using '../' sequences) to reach files outside the intended workspace. This enables unauthorized filesystem operations including fs.readFile, fs.writeFile, fs.mkdir, and fs.readdir. The issue affects versions up to commit 55c81b9; as of the advisory date, no official patch has been confirmed by the maintainer.
Affected products
- dazeb cline-mcp-memory-bank up to 55c81b9cf6c16700983c84dc4cdea3cafa19a75f
Timeline
- 2026-04-27: disclosed: Issue reported to the project maintainer on GitHub
- 2026-05-25: advisory: Vulnerability published by VulDB/NVD