Skip to content
Threat Feed

Product

Mcp-Ssh-Tool

1 brief RSS
high advisory

mcp-ssh-tool Path Traversal and Timing Attack Vulnerabilities

mcp-ssh-tool versions 2.1.0 and earlier have a policy bypass in transfer path handling and expose a timing side channel in bearer-token comparison for HTTP deployments, addressed in version 2.1.1.

mcp-ssh-tool path-traversal timing-attack npm
2r