Drone Airspace Governance MCP Server

This MCP server has critical security vulnerabilities that make it unsuitable for deployment. The most severe issue is an arbitrary code execution vulnerability via path traversal in sys.path.insert(0, os.path.expanduser('~/clawd/meok-labs-engine/shared')), which allows loading untrusted code from a user-writable directory. Additionally, the authentication system is non-functional (check_access() is imported but never properly defined in the visible codebase), creating an authentication bypass. The server also exposes a rate-limiting mechanism that can be trivially bypassed and lacks proper input validation. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.