Path Traversal in boxpositron with-context-mcp

Executive Summary

CVE-2026-81491 is a path traversal vulnerability in boxpositron with-context-mcp up to version 3.0.7. It affects functions like ingest_notes, teleport_notes, and sync_notes in src/index.ts. Attackers can manipulate path inputs to access files outside the intended project or vault boundaries, enabling unauthorized file read, write, or delete operations.

Useful 0 Not Useful 0

Detection Guidance

Check for unusual file access patterns or unauthorized modifications in directories outside the intended project or vault paths. Look for logs showing path traversal attempts like '..\' or '../' in inputs to ingest_notes, sync_notes, or teleport_notes tools. Monitor network traffic for suspicious MCP endpoint invocations with attacker-controlled path values.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to read, modify, or delete files outside the designated workspace by exploiting path traversal sequences. If you use the affected tool, an attacker could access sensitive data, alter files, or disrupt operations by invoking vulnerable MCP endpoints with malicious path values.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles and HIPAA's confidentiality requirements. Unauthorized file access or modification may result in non-compliance, potential data breaches, and regulatory penalties due to compromised data integrity and confidentiality.

Useful 0 Not Useful 0

Mitigation Strategies

Disable the vulnerable tools (ingest_notes, sync_notes, teleport_notes) if possible. Restrict path arguments to an allowlisted directory and implement strict path validation to prevent traversal sequences. Ensure authentication is enforced for MCP endpoints and enable logging to detect exploitation attempts.

Useful 0 Not Useful 0