mcp-language-server

CRITICAL: The server exposes tools like 'edit_file' and 'rename_symbol' that directly accept 'filePath' arguments from MCP clients (potentially LLMs). The source code does NOT appear to sanitize or confine these 'filePath' arguments to the configured '--workspace' directory. This creates a critical vulnerability where a malicious or unconstrained LLM could perform arbitrary file writes, deletions, or renames on the host system outside the intended workspace. Similarly, 'definition', 'references', 'diagnostics', and 'hover' tools, which also accept 'filePath', could lead to arbitrary file reads and information disclosure. The 'lspCommand' to run the underlying Language Server is specified at startup, making it a configuration risk rather than a direct runtime injection vulnerability.