Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read

Summary The readfile MCP tool in codebaserag/mcp/tools.py contains a path traversal vulnerability in its paginated branch when offset or limit is supplied. The handler constructs a file path using Pathself.projectroot / filepath without subsequently validating that the resolved path remains withi...

GHSA-VVR2-H2JP-838M Code Graph RAG: MCP paginated read_file path traversal / arbitrary file read

Summary The readfile MCP tool in codebaserag/mcp/tools.py contains a path traversal vulnerability in its paginated branch when offset or limit is supplied. The handler constructs a file path using Pathself.projectroot / filepath without subsequently validating that the resolved path remains withi...