Vibe Coding
MCPVault's path filter is defeated by macOS and Windows filesystem case folding
CVE-2026-57441 (8.4, published 2026-09-15) covers MCPVault before 0.11.4, where `PathFilter` in `src/pathfilter.ts` compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem-equivalent names. On case-insensitive macOS and Windows filesystems, case variants of `.git`, `.obsidian` or `node_modules` pass both `isAllowed()` and `isAllowedForListing()` while the OS opens the restricted directory; Windows trailing dots and spaces give the same bypass. CVE-2026-57442 (6.9, fixed in 0.11.5) is the companion: the deny-list patterns are root-anchored, so nested `.git` and `node_modules` segments never match.
Source
↳ Follow the thread