This vulnerability in edvardlindelof notes-mcp (up to version 0.1.4) involves improper validation of the root_dir/path argument in the notes_mcp.py file, enabling path traversal attacks. Such attacks allow remote adversaries to access files outside the intended directory structure. The vulnerability is remotely exploitable without authentication or user interaction. Although publicly disclosed and exploitable, no official patch or remediation has been released by the vendor as of the publication date.

Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the affected system by traversing directories outside the intended root directory. This may lead to unauthorized disclosure of sensitive information. There is no indication of privilege escalation or code execution from the available data. The vulnerability is rated medium severity with a CVSS 4.0 score of 6.9.

No official fix or patch is currently available from the vendor. Users should monitor the vendor's project for updates or patches addressing this issue. Until a fix is released, consider restricting network access to the affected service and applying any available access controls to limit exposure. Patch status is not yet confirmed — check the vendor advisory or project repository for current remediation guidance.