Attacks/MCP Exploitation/MCP-003

CRITICALCWE-22

MCP-003 MCP Home Directory Traversal

MCP Exploitation: Attempts to exploit MCP tool call parameters (path traversal, command injection, SSRF)

Description

Attempts to read SSH keys via path traversal

Remediation

Block access to home directories and sensitive paths (.ssh, .aws, .gnupg).

Severity

CRITICAL

OASB Control

CWE

CWE-22

PreviousMCP-002 MCP Path Traversal NextMCP-004 MCP Command Injection