Attacks/MCP Exploitation/MCP-009

CRITICALCWE-73

MCP-009 MCP Write to Sensitive Path

MCP Exploitation: Attempts to exploit MCP tool call parameters (path traversal, command injection, SSRF)

Description

Attempts to write to sensitive system paths via MCP

Remediation

Block writes to system paths. Use strict path allowlists for write operations.

Severity

CRITICAL

OASB Control

CWE

CWE-73

PreviousMCP-008 MCP SQL Injection NextMCP-010 MCP Env Variable Extraction