All vulnerabilities

GHSA-8x2w-m5v2-phxr

rsigma: --rules-dir confinement bypass lets any MCP tool caller read and mutate arbitrary files

highCVSS 8.5CWE-22

Vendor

Timescale

Package

rsigma-mcp cargo

Affected

>= 0.16.0, < 0.23.0

Fixed in

0.23.0

Disclosed

2026-09-30

Credit

Avishai Gonen

path-traversalmcp

Published advisory