Evidence · DiggingBeagle record
MCP filesystem move_file same-device rename races unpinned source, importing protected outside file
Upstream reference filesystem MCP advisory describes a same-device move_file race in which the source path is not anchored after validation. The described impact includes moving an outside file into the permitted tree, with local swapper and platform preconditions.
- Source role
- primary disclosure
Evidence record
Upstream reference filesystem MCP advisory describes a same-device move_file race in which the source path is not anchored after validation. The described impact includes moving an outside file into the permitted tree, with local swapper and platform preconditions.
Claim-level citations (1)
- supportsMCP filesystem move_file could move a protected outside source through a renamed parent: GHSA-7m4x-rv66-mxhh describes a same-device move_file race that could move an outside file into an allowed directory because the source pathname was not pinned.
Security advisory, source-parent swap test and patched-version listing