AI agent vulnerability · Other MCP servers and tools

GHSA-j7h9-2jh7-g967: mcp-ssh-tool has file transfer path policy bypass and bearer token comparison hardening

highCVSS 4.0 8.7

Summary mcp-ssh-tool has released version 2.1.1 with security hardening for transfer path authorization and HTTP bearer authentication. The release addresses: - insufficient local path policy enforcement in transfer-related filesystem handling - incomplete canonicalization and segment-boundary handling for deny-prefix path policy checks - non-constant-time HTTP bearer token comparison Impact Affected versions may…

Published May 7, 2026 · Updated Aug 16, 2026

Affected packages

mcp-ssh-tool

Ecosystem: npm
Affected: <= 2.1.0
Fixed in: 2.1.1
Check: npm ls mcp-ssh-tool

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Summary

mcp-ssh-tool has released version 2.1.1 with security hardening for transfer path authorization and HTTP bearer authentication.

The release addresses:

insufficient local path policy enforcement in transfer-related filesystem handling
incomplete canonicalization and segment-boundary handling for deny-prefix path policy checks
non-constant-time HTTP bearer token comparison

Impact

Affected versions may allow policy bypass in transfer path handling under specific configurations, and may expose a timing side channel in bearer-token comparison for HTTP deployments.

Patched Version

Upgrade to mcp-ssh-tool >= 2.1.1.

npm install -g mcp-ssh-tool@latest

Workarounds

For deployments that cannot immediately upgrade:

avoid exposing HTTP transport beyond loopback
use strict filesystem policy configuration
avoid granting MCP clients access to sensitive local transfer paths
monitor audit logs for unexpected transfer operations

Credits

Reported by dodge1218.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries