A path traversal vulnerability exists in the UsamaK98 python-notebook-mcp project up to commit a05a232815809a7e425b5fa7be26e0d4369894c2. The affected functions create_notebook, read_notebook, edit_cell, and add_cell in server.py improperly handle file paths, enabling remote attackers to traverse directories and access files outside the intended scope. The vulnerability is remotely exploitable without authentication or user interaction. The project employs a rolling release model, so no fixed version is identified, and the vendor has not yet issued a patch or advisory. Exploit code is publicly available, but no active exploitation has been reported.

Successful exploitation could allow an unauthenticated remote attacker to read or manipulate files on the server by traversing directories beyond the intended notebook storage paths. This could lead to unauthorized disclosure or modification of sensitive data. The CVSS 4.0 score of 6.9 reflects a medium severity impact with low vector complexity and no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded or released a fix, users should monitor the project repository and issue tracker for updates. In the meantime, restricting network access to the affected service and employing file system access controls may reduce exposure.