OASB
Attacks/MCP Exploitation/MCP-002
CRITICALCWE-22

MCP-002 MCP Path Traversal

MCP Exploitation: Attempts to exploit MCP tool call parameters (path traversal, command injection, SSRF)

Description

Attempts path traversal via MCP read_file tool

Remediation

Validate and canonicalize file paths. Block path traversal sequences. Use path allowlists.

Severity

CRITICAL

OASB Control

2.2

CWE

CWE-22
PreviousMCP-001 MCP Tool EnumerationNextMCP-003 MCP Home Directory Traversal