A critical path traversal vulnerability in getsimpletool mcpo-simple-server allows unauthenticated remote attackers to delete arbitrary files on the host system.

This is a relative path traversal vulnerability (CWE-22/CWE-23) located in the delete_shared_prompt function within the file src/mcpo_simple_server/services/prompt_manager/base_manager.py. An unauthenticated remote attacker can manipulate the detail argument to escape the intended directory and perform unauthorized filesystem operations.

The ability for an unauthenticated attacker to delete arbitrary files on the server poses a significant risk to system integrity and availability. Successful exploitation could result in the deletion of critical configuration files, application data, or system binaries, leading to service disruption and potential data loss. Although the CVSS score is 7.3, the potential for arbitrary file deletion justifies a high-priority response to prevent catastrophic system failure.

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected service by placing it behind a secure authentication proxy or firewall that denies public access.

Proactive Monitoring: Monitor filesystem access logs for suspicious patterns, particularly entries containing directory traversal sequences like ../ or unexpected absolute paths directed toward the prompt manager service.

Compensating Controls: Deploy a Web Application Firewall (WAF) to intercept and block incoming requests containing traversal sequences or suspicious path characters in the detail parameter.

Public Exploit Available: Yes, a published proof-of-concept exists, attributed to the security researcher's technical write-up linked in the GitHub issue report.

Given the availability of a public proof-of-concept and the severity of arbitrary file deletion, this vulnerability represents a significant risk to production environments. Organizations currently running mcpo-simple-server must implement immediate network-level restrictions to prevent unauthorized access. Monitor vendor repositories closely for the release of an official security patch and apply it immediately upon availability.