Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

npm package

mcp-ssh-tool

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.7npmAmendedPublished

    mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening

    GHSA-j7h9-2jh7-g967

    Affected
    • npm mcp-ssh-tool <= 2.1.0
    Fixed in
    2.1.1· Vendor fix available
    Issue
    mcp-ssh-tool has released version 2.1.1 with security hardening for transfer path authorization and HTTP bearer authentication. The release addresses: - insufficient local path policy enforcement in transfer-related filesystem handling - incomplete canonicalization and segment-boundary handling for deny-prefix path policy checks - non-constant-time HTTP bearer token comparison Impact Affected versions may allow policy bypass in transfer path handling under specific configurations, and may expose a timing side channel in bearer-token comparison for HTTP deployments. Patched Version Upgrade to mcp-ssh-tool = 2.1.1. Workarounds For deployments that cannot immediately upgrade: - avoid exposing HTTP transport beyond loopback - use strict filesystem policy configuration - avoid granting MCP clients access to sensitive local transfer paths - monitor audit logs for unexpected transfer operations Credits Reported by dodge1218.

    Recommended action: Upgrade to 2.1.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →