CVE-2026-94046: 0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path traversal
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. isPathInsideProjectRoot only blocks filePath escaping the attacker-chosen projectRootPath; the root itself is untrusted client input - set projectRootPath=/etc, filePath=hosts and the guard passes. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
An attacker needs low-level privileges and the ability to invoke the MCP Tool's get_file_snippet function with control over both projectRootPath and filePath. The attack can be launched remotely and requires no user interaction.
Why does the existing path validation not prevent exploitation?
isPathInsideProjectRoot only verifies that filePath remains within projectRootPath. Because projectRootPath is attacker-controlled, an attacker can select a sensitive directory as the root, such as /etc, and request a file within it.
What information could be exposed?
The reported impact is limited to confidentiality. An attacker can use the attacker-selected root path to retrieve files that pass the path-within-root check, such as /etc/hosts when projectRootPath is set to /etc.
How urgent is remediation?
Public exploit code is available, and the affected project had not responded to the earlier issue report. Systems using ACE-MCP through version 4.10.8 should treat remotely accessible use of this tool by low-privileged users as exposed.