GHSA-f7wf-v2vw-mpcx: mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath

Summary

GHSA-f7wf-v2vw-mpcx affects mcp-memory-keeper, where the context_import tool passed the caller-supplied filePath directly to fs.readFileSync without path confinement. A malicious MCP client, or an LLM agent prompt-injected into calling the tool, could read any file the server process can access. Valid JSON files are imported in full and retrievable through context_get or context_export, while other files leak their leading bytes through the JSON.parse SyntaxError message.

Mitigation

Fixed in 0.13.0 (PR #36). Upgrade to >= 0.13.0. There is no configuration-only workaround for affected versions.

Topics

• Model Context Protocol

Related items

• MediumCVE-2026-126767: OpsTree REMS prompt injection exposes hidden system prompt via /api/v1/rca/chatSimilar attack · NVD/CVE Database
• LowYour Robot's Safety Functions Already Work. What If the Input Lies?Similar attack · VicOne Blog
• InfoTop GenAI security resources — November 2026Similar attack · Adversa AI Blog
• MediumAI SAST Finding: Path Traversal in OpenClaw via LLM Guardrail Bypass | Endor LabsSimilar attack · Endor Labs Blog
• InfoSecurity, Privacy, and Trustworthy Design for Retrieval-Augmented Generation SystemsSimilar attack · OpenAlex (peer-reviewed AI security)