Threats affecting pkg:github/roomi-fields/notebooklm-mcp

A path traversal vulnerability exists in roomi-fields notebooklm-mcp versions 1.6.0 through 2.0.2 in the POST /batch-to-vault endpoint and the batch_to_vault MCP tool starting from version 1.7.0. This flaw allows attacker-controlled inputs to cause files to be written outside the intended vault directory. Version 2.0.3 introduces sanitization and containment features to mitigate this issue. Users unable to upgrade should restrict server permissions and limit endpoint exposure.