mcp-servers-github-mslearn-filesystem

The `server_filesystem.py` module exposes `read_file` and `save_file` tools directly to the AI without adequate path sanitization or validation. The `read_file` tool takes a `filepath` argument, which can be exploited via path traversal (e.g., `../../../../etc/passwd`) to read arbitrary files on the system that the Python process has permissions for. Similarly, `save_file` constructs paths using `topic` and `filename` arguments, which could be manipulated via path traversal to write files outside the intended `data/` directory. This poses a significant risk for data exfiltration (e.g., `.env` file containing API keys) or arbitrary file writes, even if the AI is generally trusted, as prompt injection could exploit these vulnerabilities.