MCPVault versions before 0.11.5 contain a path traversal vulnerability (CWE-22) due to improper limitation of pathnames in the PathFilter implementation. The deny-list patterns are root-anchored and do not match nested directory segments such as .git, .obsidian, and node_modules, allowing these paths to bypass the isAllowed() and isAllowedForListing() checks. An attacker influencing AI-selected paths can traverse into nested repository or Obsidian metadata, read remote URLs or embedded tokens, or cause nested node_modules content to contaminate the listAllTags index. This vulnerability is addressed by updating to version 0.11.5.

An attacker with the ability to influence paths selected by an AI agent can exploit this vulnerability to access restricted directories and files within nested .git, .obsidian, and node_modules folders. This can lead to unauthorized disclosure of sensitive metadata, remote URLs, embedded tokens, or pollution of internal indexing mechanisms. The CVSS 4.0 score of 6.9 reflects a medium severity with local attack vector, low attack complexity, no privileges required, and high impact on confidentiality.

Upgrade to bitbonsai mcpvault version 0.11.5 or later, where the path traversal issue has been fixed. No other mitigation is indicated by the vendor advisory. Patch status is confirmed fixed in 0.11.5.