This vulnerability affects eiceblue spire-pdf-mcp-server version 0.1.1, specifically in the get_pdf_path function within src/spire_pdf_mcp/server.py. By manipulating the filepath argument, an attacker can perform a path traversal attack, potentially accessing files outside the intended directory. The attack can be executed remotely without authentication. The vulnerability is publicly known and an exploit exists, but the vendor has not provided a fix or mitigation guidance to date.

Successful exploitation allows an unauthenticated remote attacker to read arbitrary files on the server by traversing directories via the manipulated filepath argument. This could lead to unauthorized disclosure of sensitive information. The CVSS score of 6.9 reflects a medium severity impact with low complexity and no required privileges or user interaction.

No official patch or remediation is currently available from the vendor. Users should monitor the vendor's communications for updates. Until a fix is released, consider restricting network access to the affected service and implementing external controls such as web application firewalls to detect and block path traversal attempts.