An unauthenticated path traversal vulnerability in UsamaK98 python-notebook-mcp allows remote attackers to read and write arbitrary files outside the designated workspace.

This flaw is a path traversal weakness categorized under CWE-22, residing in the notebook manipulation functions of server.py due to missing boundary checks on absolute and relative paths, and it can be triggered by unauthenticated remote attackers.

A successful exploit enables unauthorized access to sensitive files and allows malicious modifications to system data outside the intended workspace scope, resulting in a potential compromise of confidentiality and integrity. The assigned CVSS score of 7.3 reflects the significant risk posed by remote unauthenticated exploitation against vulnerable software deployments.

Immediate Action: Restrict network access to the MCP service to trusted internal networks only, as no official vendor patch is currently available.

Proactive Monitoring: Monitor filesystem access logs and process execution behavior for anomalous file creation or read operations outside the designated workspace directory.

Compensating Controls: Deploy the service within an isolated container or chroot environment to limit the operating system privileges and filesystem reach available to the application process.

Public Exploit Available: Yes, a public proof-of-concept exists via the GitHub issue reference.

Given the high severity of this path traversal flaw and the availability of public proof-of-concept exploit details, administrators must treat this risk as urgent. Implement strict network segmentation and process isolation immediately while monitoring upstream project repositories for an official security update.