bvbrc-mcp-server

The server has a critical file disclosure vulnerability. The `workspace_upload` tool accepts a `filename` parameter, which is then used by the `_upload_file_to_url` function to read a file from the *local filesystem of the server itself*. If a malicious user (or LLM) provides an arbitrary path for `filename` (e.g., `/etc/passwd` or `/root/.ssh/id_rsa`), the server could read and upload these sensitive files to the user's workspace, assuming the server process has read permissions. Additionally, the `create_feature_group` tool includes a heuristic fix for feature IDs that attempts to insert a '.' character, which, while not a direct vulnerability, is a code smell that could silently alter valid user input if it doesn't conform to the expected pattern. Authentication relies on a specific PATRIC token format parsed by string manipulation, which could be brittle if the format changes unexpectedly.