A critical path traversal vulnerability in the engineer-your-data toolset enables unauthenticated remote attackers to access or modify sensitive files outside the intended workspace boundary.

The application fails to enforce the configured WORKSPACE_PATH directory during file operations, including read_file, write_file, list_files, and file_info. Unauthenticated attackers can provide arbitrary file paths to these tools, leading to unauthorized file system access.

Successful exploitation permits an attacker to perform arbitrary file reads and writes across the host system, depending on the permissions of the service account. This poses a severe risk of sensitive data exfiltration, system configuration tampering, or remote code execution via file overwriting. With a CVSS score of 7.3, this flaw represents a significant security risk that could lead to full system compromise if the service runs with elevated privileges.

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the affected service or disable file-writing tools in untrusted environments.

Proactive Monitoring: Monitor system logs for unauthorized attempts to access sensitive directories, such as /etc/ or /home/, and review file system activity for unexpected file modifications.

Compensating Controls: Deploy a Web Application Firewall or similar inspection mechanism to validate and sanitize incoming MCP tool requests, specifically blocking paths containing directory traversal patterns like ../.

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the GitHub issue report referenced by the vulnerability record.

Given the ease of exploitation and the potential for full system compromise, this vulnerability requires urgent attention. Organizations currently utilizing engineer-your-data should isolate the service from public networks and implement strict access controls immediately. Monitor for official vendor updates and apply the security patch as soon as it is released to restore the integrity of the workspace boundary.