CyberRota Analysis
AI-GeneratedA path traversal vulnerability exists in the upload_document function of the Handwriting-OCR handwriting-ocr-mcp-server version 0.1.0, allowing local attackers to manipulate file arguments in the fs.readFileSync method. This could lead to unauthorized access to sensitive files on the server. Organizations using this specific version of the software should prioritize remediation to mitigate potential local exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.