An unauthenticated path traversal vulnerability in Axle-Bucamp MCP-Docusaurus allows remote attackers to read, modify, or delete arbitrary files outside the intended documentation directory.

This is a Path Traversal vulnerability (CWE-22) residing in the update_document, continue_document, delete_document, and get_content functions within app/routes/document.py, where attacker-controlled input arguments are concatenated without canonical containment checks. The attack can be initiated remotely by unauthenticated users.

A successful exploit of this vulnerability can lead to severe operational disruptions and data compromise. Attackers can bypass directory restrictions to read sensitive configuration files, overwrite critical system data, or delete files within the bounds of the service process permissions. Although the base CVSS score is 7.3, the presence of a public proof-of-concept combined with unauthenticated remote exploitation vectors elevates the overall business risk.

Immediate Action: Restrict network exposure of the MCP service to trusted local callers only, and disable document mutation tools until a vendor patch is released.

Proactive Monitoring: Monitor file access logs and system audit trails for anomalous file read, write, or delete requests utilizing path traversal sequences such as dot-dot-slash patterns.

Compensating Controls: Implement strict boundary checks at the network perimeter or deploy Web Application Firewalls (WAF) to inspect and block requests containing directory traversal sequences directed at the application endpoints.

Public Exploit Available: Yes, a public proof-of-concept and technical write-up are available via GitHub issues.

Given the availability of a public proof-of-concept and the ability for unauthenticated remote attackers to manipulate files, administrators must treat this vulnerability with high urgency. Apply compensating network access controls immediately and monitor upstream repositories for official security updates.