notes-mcp versions up to 0.1.4 contain a path traversal vulnerability in the notes_mcp.py file. This flaw allows remote attackers to manipulate the root_dir/path argument to access unauthorized filesystem locations. The vulnerability has a high severity score of 7.3 and has been publicly disclosed, though no fix or vendor response is currently available.