Most recent entries from all

GHSA-hxpf-9xvq-wph8 — netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

2026-10-05T23:01:14.260440+00:00

Affected: PyPI: netlicensing-mcp

## REST Path Traversal Bypasses Token Redaction in netlicensing-mcp

### Summary

The `netlicensing_get_product` MCP tool in `netlicensing-mcp` interpolates a caller-controlled `product_number` argument directly into a REST URL path without any validation. Passing `../token` as the product number causes `httpx` to normalize `/product/../token` into `/token`, silently redirecting the request to the NetLicensing token endpoint instead of the intended product endpoint. The response is then serialized through the generic `_wrap_json` wrapper rather than the token-specific `_wrap_json_token_read` wrapper, bypassing all APIKEY `number` and SHOP `shopURL` redaction. An authenticated MCP client can recover plaintext API key values that the token read tools intentionally mask, including admin-level APIKEY credentials.

### Details

The vulnerability is a path traversal (CWE-22) that exploits the interaction between unsanitized string interpolation and `httpx`'s WHATWG URL normalization.

**Source — `src/netlicensing_mcp/tools/products.py:22`**

```python async def get_product(product_number: str) -> dict: """Get a single product by its number.""" return strip_output_fields(await nl_get(f"/product/{product_number}")) ```

`product_number` is inserted directly into the REST path with no validation. A value of `../token` produces the path `/product/../token`.

**Sink — `src/netlicensing_mcp/client.py:143`**

```python async def nl_get(path: str, params: dict[str, str] | None =…

PYSEC-2026-3489 — netlicensing-mcp: REST Path Traversal Bypasses Token Redaction

2026-10-05T23:01:14.260690+00:00