Apache APISIX versions from 3.19.0 up to but not including 3.20.0 contain a relative path traversal vulnerability combined with an unintended proxy behavior. This flaw allows a caller of the MCP endpoint to invoke endpoints not declared in the OpenAPI document, using the HTTP method declared for the tool and the credentials associated with the Route. The issue is resolved in version 3.20.0.