code-graph-rag MCP read_file path bypass allows arbitrary file read
Secret files like passwords and private keys on code tool servers can be stolen.
Summary
In code-graph-rag's MCP server, the paginated read_file branch skips path validation, so an unauthenticated caller of a network-exposed HTTP server can read files the server process can access. Versions before 0.0.345 are affected.
Affected when
- HTTP MCP server exposed to the network
- Paginated file reads (offset or limit) in use
What to do
Update to version 0.0.345 or later.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen