CVE-2026-7205 Details

A path traversal vulnerability has been identified in Duartium Papers-MCP-Server version 0.1.0, specifically in the search_papers function of the file src/main.py. The vulnerability arises because the function allows manipulation of the topic argument, which is used to create a directory name under the papers directory. The server only lowercases the topic string and replaces spaces with underscores, while traversal sequences and path separators remain intact. This oversight enables an attacker to escape the intended directory and write a JSON file containing arbitrary data to a location outside the application's designated workspace. The vulnerability can be exploited remotely, and a public exploit is available.