MCP-CodeV

The server's communication relies on local stdio, mitigating network-based attack vectors. However, a critical vulnerability exists: the server's tool handlers (e.g., `read_codev_file`, `analyze_codev_syntax`, `read_pdf_content`, `search_codev_commands`) do not sanitize the `filename` argument. This allows for directory traversal attacks, enabling a malicious prompt or user to request and read arbitrary files outside the configured `CODEV_DIR` and `PDF_DIR` (e.g., `/etc/passwd` or sensitive user files). While the architecture document mentions path sanitization, it is not implemented in the provided `src/index.ts`. The PDF text extraction is basic and might struggle with complex PDFs, but this is a functionality limitation rather than an immediate security risk. The server is designed to be read-only, preventing file modification.