The vulnerable component parses an argument called file_name but does not sanitize it, resulting in a classic path‑traversal error (CWE‑22). An attacker who can invoke the read_memory_bank_file/append_memory_bank_entry function locally can supply a crafted path (e.g., ../../etc/passwd) and obtain or overwrite files outside the intended directory. The flaw does not grant network or remote code execution; it requires local execution privileges. Consequently the confidentiality, integrity, and availability consequences are scoped to the execution context of the locally running process.

IncomeStreamSurfer’s roo‑code‑memory‑bank‑mcp‑server component is affected. The insecure state exists in any release up to and including commit 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e. Because the project employs a rolling‑release model, precise version numbers are not disclosed and any iteration prior to that hash remains vulnerable.

The CVSS score of 4.8 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local authority, so an attacker must be able to run code on the target machine. There is no documented proof of exploitation, but the path‑traversal flaw is a well‑known and easy to exploit weakness when local access is possible.