The flaw is in the scanProjectDeps function of augments‑mcp‑server, where the packageJsonPath argument is improperly validated. An attacker who can execute code locally can supply a crafted path and cause the application to resolve to arbitrary files on the host, enabling local read or write operations. This path traversal weakness is classified as CWE‑22, potentially compromising confidentiality or integrity of sensitive data. The vulnerability is limited to systems where the attacker already has local user access, as no network‑facing exploitation vector is available.

The vulnerability affects augmnt’s augments‑mcp‑server component, specifically version 7.1.0. No other versions are documented as vulnerable. The product is hosted on the vendor’s GitHub repository.

The CVSS score of 4.8 indicates moderate severity, and the EPSS score of < 1% (approximately 0.00137) indicates a very low exploitation probability, although an exploit has been published and is usable. The flaw is not listed in the CISA KEV catalog. Because exploitation requires local execution, the risk is confined to environments where an attacker can run commands locally. The exploit has been published and is usable, so administrators should verify local user privilege levels and consider applying fixes or mitigation strategies.