Directory Traversal in DayuanJiang next-ai-draw-io

Executive Summary

CVE-2026-50757 is a Directory Traversal vulnerability in the next-ai-draw-io 0.4.13 and its MCP server (versions <= 0.1.16). It allows remote attackers to write arbitrary files to any location on the filesystem by exploiting improper path validation in the export_diagram tool. The tool accepts a path parameter without sanitization, enabling path traversal sequences like ../../../etc/cron.d/job.

Useful 0 Not Useful 0

Detection Guidance

Check if the next-ai-draw-io MCP server (version <= 0.1.16) or next-ai-draw-io (version <= 0.4.13) is installed. Look for unusual file writes in system directories like /etc/cron.d/ or user home directories. Monitor network traffic for suspicious MCP tool calls to export_diagram with path parameters containing traversal sequences like ../../../.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to system compromise, data theft, or persistence mechanisms. Attackers could write malicious files to critical system directories, execute arbitrary code, or maintain access through mechanisms like cron jobs. The MCP server runs with full filesystem permissions, making the impact severe.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file writes, potentially exposing sensitive data stored on the system. For GDPR, this may result in violations of data protection principles if personal data is accessed or modified without authorization. Under HIPAA, it could compromise protected health information if the system processes such data, leading to breaches of confidentiality requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update next-ai-draw-io to version > 0.4.13 and @next-ai-drawio/mcp-server to version > 0.1.16. Disable or restrict access to the export_diagram tool in the MCP server configuration. Implement strict input validation for all path parameters in the application. Review filesystem permissions to limit write access for the MCP server user.

Useful 0 Not Useful 0