Cron Ai MCP Server

This MCP server contains a critical authentication bypass vulnerability and relies on an external, unverified auth_middleware module. The server implements basic cron parsing functionality but has a serious flaw: the `check_access()` function is called but its denial is not properly enforced—functions return error responses but do not prevent execution. Additionally, the code path-inserts a shared auth module from a hardcoded user directory (~/clawd/meok-labs-engine/shared), creating a supply chain risk and making the server non-portable and dependent on external systems not included in the repository. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.