bear-mcp-server

The server has a critical Local File Read (LFR) vulnerability. The `create_note_with_image` and `add_image` tools accept an `image_path` parameter, which is then directly read using `fs.readFileSync` without validation or sanitization. A malicious actor or compromised LLM could provide paths to sensitive local files (e.g., '/etc/passwd', '~/.ssh/id_rsa'), leading to their content being base64 encoded and embedded into a Bear note. Additionally, the `BEAR_TOKEN` environment variable is required at startup but appears to be unused in the `BearAPI` logic, which is confusing and potentially misleading. While URL encoding is used for x-callback-url parameters, the LFR is the primary concern.