This vulnerability in puchunjie doc-tools-mcp 1.0.18 arises from improper validation of the filePath argument in the create_document and open_document functions within src/mcp-server.ts. An attacker can exploit this flaw to perform path traversal attacks, potentially accessing files outside the intended directory. The flaw is remotely exploitable without user interaction and has a CVSS 4.0 base score of 5.3, indicating medium severity. No official patch or remediation has been released as of the publication date.

Successful exploitation allows remote attackers to traverse directories and access files outside the intended scope of the application. This can lead to unauthorized disclosure of sensitive information. The CVSS vector indicates low to limited impact on confidentiality, integrity, and availability, consistent with a medium severity rating. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider implementing temporary mitigations such as restricting access to the affected functions, validating and sanitizing filePath inputs at the application or network level, or isolating the application environment to limit potential damage.