Vendor
The @roomi-fields/notebooklm-mcp package is vulnerable to arbitrary file write via path traversal in the vault_batch tool and /batch-to-vault endpoint, allowing attackers to plant malicious files in unauthorized directories.