This vulnerability in puchunjie doc-tools-mcp 1.0.18 involves improper validation of the filePath parameter in the create_document and open_document functions within src/mcp-server.ts. An attacker can manipulate this argument to traverse directories outside the intended scope, potentially accessing unauthorized files on the server. The issue can be exploited remotely without user interaction and has a CVSS 4.0 base score of 5.3, indicating medium severity. Despite early notification, the vendor has not provided a fix or mitigation guidance as of the published date.

Successful exploitation allows an attacker to perform path traversal attacks remotely, potentially leading to unauthorized access to files on the affected system. The vulnerability does not require privileges or user interaction but has low to limited impact on confidentiality, integrity, and availability as indicated by the CVSS vector. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should consider restricting network access to the affected service and monitor for suspicious activity related to file path manipulation. Avoid exposing the vulnerable version to untrusted networks until an official patch or mitigation is available.