Config Validator Ai MCP Server

This MCP server has critical security issues stemming from unsafe path manipulation and dependency on an external, unverified authentication module. The code inserts a user-controlled path into sys.path and imports `auth_middleware` from an external location without validation, creating both path traversal and arbitrary code execution risks. Additionally, the server lacks proper error handling and exposes sensitive configuration details. These issues make the server unsuitable for production use without significant remediation. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.