The vulnerability exists in the export_state and import_state tools of sublinear-time-solver, which pass an attacker‑controlled file path directly to filesystem operations without validation. An attacker able to invoke these MCP tools can read, overwrite, or create arbitrary files that the server process can access, allowing the exfiltration of sensitive data, injection of malicious code, or disruption of service by corrupting critical files. The underlying weakness is a path‑traversal flaw (CWE‑73).

This issue affects the ruvnet:sublinear-time-solver package and the corresponding consciousness‑explorer component. Versions older than sublinear‑time‑solver 1.6.0 and consciousness‑explorer 1.1.2 are vulnerable; the fix is included in those releases.

The CVSS score is 7.1, indicating a high severity vulnerability. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires an attacker to access the MCP interface, which may be exposed over the network or otherwise accessible to adversarial code. Once accessed, the attacker can manipulate any file within the server's file system scope, creating high‑impact consequences for confidentiality, integrity, and availability.