GHSA-J7H9-2JH7-G967高危已审查

mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening

OSV 1.4.0 · github-reviewed · 修改于 2026-05-08 05:45

发布时间

2026-05-08 05:45

GitHub 审查时间

2026-05-08 05:45

NVD 发布时间

—

源文件

advisories/github-reviewed/2026/05/GHSA-j7h9-2jh7-g967/GHSA-j7h9-2jh7-g967.json

公告说明

Summary

mcp-ssh-tool has released version 2.1.1 with security hardening for transfer path authorization and HTTP bearer authentication.

The release addresses:

insufficient local path policy enforcement in transfer-related filesystem handling
incomplete canonicalization and segment-boundary handling for deny-prefix path policy checks
non-constant-time HTTP bearer token comparison

Impact

Affected versions may allow policy bypass in transfer path handling under specific configurations, and may expose a timing side channel in bearer-token comparison for HTTP deployments.

Patched Version

Upgrade to mcp-ssh-tool >= 2.1.1.

npm install -g mcp-ssh-tool@latest

Workarounds

For deployments that cannot immediately upgrade:

avoid exposing HTTP transport beyond loopback
use strict filesystem policy configuration
avoid granting MCP clients access to sensitive local transfer paths
monitor audit logs for unexpected transfer operations

Credits

Reported by dodge1218.

受影响的软件包

标识信息

别名 / CVE

无

CWE

CWE-208CWE-22

软件生态

npm

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V4

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

原始 OSV JSON

{
  "id": "GHSA-j7h9-2jh7-g967",
  "aliases": [],
  "details": "## Summary\n\n`mcp-ssh-tool` has released version `2.1.1` with security hardening for transfer path authorization and HTTP bearer authentication.\n\nThe release addresses:\n\n- insufficient local path policy enforcement in transfer-related filesystem handling\n- incomplete canonicalization and segment-boundary handling for deny-prefix path policy checks\n- non-constant-time HTTP bearer token comparison\n\n## Impact\n\nAffected versions may allow policy bypass in transfer path handling under specific configurations, and may expose a timing side channel in bearer-token comparison for HTTP deployments.\n\n## Patched Version\n\nUpgrade to `mcp-ssh-tool >= 2.1.1`.\n\n```bash\nnpm install -g mcp-ssh-tool@latest\n```\n\n## Workarounds\n\nFor deployments that cannot immediately upgrade:\n\n- avoid exposing HTTP transport beyond loopback\n- use strict filesystem policy configuration\n- avoid granting MCP clients access to sensitive local transfer paths\n- monitor audit logs for unexpected transfer operations\n\n## Credits\n\nReported by `dodge1218`.",
  "summary": "mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.1.1"
            }
          ]
        }
      ],
      "package": {
        "name": "mcp-ssh-tool",
        "ecosystem": "npm"
      },
      "database_specific": {
        "last_known_affected_version_range": "<= 2.1.0"
      }
    }
  ],
  "modified": "2026-05-07T21:45:17Z",
  "severity": [
    {
      "type": "CVSS_V4",
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
    }
  ],
  "published": "2026-05-07T21:45:16Z",
  "references": [
    {
      "url": "https://github.com/oaslananka/mcp-ssh-tool/security/advisories/GHSA-j7h9-2jh7-g967",
      "type": "WEB"
    },
    {
      "url": "https://github.com/oaslananka/mcp-ssh-tool",
      "type": "PACKAGE"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-208",
      "CWE-22"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "nvd_published_at": null,
    "github_reviewed_at": "2026-05-07T21:45:16Z"
  }
}