CyberRota Analysis
AI-GeneratedThe vulnerability affects the processGenerateRequest function in the generate_mermaid_markdown component of automateyournetwork MCPyATS versions up to 0.1.4, allowing for local path traversal due to improper handling of folder/name arguments. This could enable an attacker to access restricted files on the system, potentially leading to data exposure or manipulation. Organizations using this software should prioritize patching to mitigate the risk of local exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. The manipulation of the argument folder/name leads to path traversal. The attack must be carried out locally.