A path traversal vulnerability in the get_pdf_path function of the spire-pdf-mcp-server 0.1.1 allows remote attackers to manipulate the filepath argument to access files outside the intended directory. This vulnerability affects the PDF File Handler component and can be exploited without authentication or user interaction. The CVSS 4.0 base score is 6.9, reflecting medium severity with network attack vector and low complexity. No official remediation or patch is currently available from the vendor.

Successful exploitation allows an attacker to read arbitrary files on the server running spire-pdf-mcp-server 0.1.1 by traversing directories via the manipulated filepath parameter. This could lead to unauthorized disclosure of sensitive information. There is no indication of privilege escalation or code execution from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider implementing temporary mitigations such as restricting network access to the affected service, validating and sanitizing input parameters at the application or network level, or disabling the vulnerable component until a patch is available.