This vulnerability exists in the arango_backup function of the src/tools.ts file within the MCP Interface component of ravenwits mcp-server-arangodb versions 0.4.0 through 0.4.7. Improper validation of the outputDir argument enables an attacker to perform path traversal attacks remotely, potentially accessing or modifying files outside the intended directory. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low complexity, no privileges or user interaction required, and low impact on confidentiality, integrity, and availability. The issue was reported early but remains unpatched with no vendor response.

Successful exploitation allows remote attackers to manipulate file system paths via the outputDir argument in the arango_backup function, potentially leading to unauthorized access or modification of files outside the designated backup directory. The impact on confidentiality, integrity, and availability is rated low, but the ability to traverse directories remotely poses a security risk. No known exploits are currently observed in the wild.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates and consider restricting network access to the affected service to trusted users only until a fix is released. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.