envector-mcp-server

The `document_preprocess.py` module's `_load_documents_from_path` function takes a `path` parameter from tool arguments and uses `pathlib.Path(path)` and `root.glob(pattern)` to read files. If this `document_path` is controlled by an untrusted client (e.g., via a malicious AI prompt), it presents a significant path traversal vulnerability, potentially allowing unauthorized reading of files outside the intended directory or denial-of-service. There is no clear input sanitization for `document_path`. While configuration is handled via environment variables/CLI (avoiding hardcoded secrets), and the default HTTP bind host is localhost (improving default security), the path traversal risk is critical. The `_to_json_available` method's fallback to `repr(obj)` could potentially expose sensitive object states in logs/errors, but is a lesser concern.