A vulnerability was detected in ef10007 MLOps_MCP 1.0.0. This impacts an unknown function of the file fastmcp_server.py of the component save_file Tool. The man…

A path traversal vulnerability was discovered in ef10007 MLOps_MCP version 1.0.0, specifically affecting the fastmcp_server.py file in the save_file Tool component. The vulnerability allows manipulation of the filename/destination argument to perform path traversal attacks. The attack can be executed remotely and the exploit code is now publicly available. The project maintainer was notified through an issue report but has not responded to the disclosure.