THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-rr55-jp92-8wp2 (high) — claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

[GHSA] GHSA-rr55-jp92-8wp2 (high) — claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

medgithub_advisoriesPublished 2026-08-19

GHSA-rr55-jp92-8wp2 Severity: high CVE: None

claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools

### Summary `claude-faf-mcp` MCP tools accept a caller-controlled `path` argument and resolve it (`~` expansion + `path.resolve()`) straight into a filesystem read/write **without confining it to a trusted project directory**. An absolute path or `../` tr

MITRE ATT&CK techniques

CredentialsT1589.001

Original source: https://github.com/advisories/GHSA-rr55-jp92-8wp2