NetLicensing MCP Server has a path‑traversal flaw that allows an authenticated non‑administrative client to craft a REST request that bypasses token redaction logic, returning plaintext token values. The vulnerability stems from unsanitized product identifiers that are interpolated into API paths, enabling traversal segments to access the "/token" endpoint. The exposed tokens contain APIKEY numbers and shopURL fields, and if an attacker obtains an administrative token, they can gain broad read, write, and delete rights across the NetLicensing account.

This issue affects Labs64 NetLicensing‑MCP versions prior to 0.1.8. The affected component is the netlicensing_get_product function, which forwards user‑controlled product numbers to a client routine that constructs REST paths without validation.

The CVSS score of 9.6 indicates a severe vulnerability, but the EPSS score of less than 1% suggests low current exploitation probability. Because the flaw is exploitable only by clients that possess a valid API key, an attacker must first authenticate to the MCP service to begin the attack. If successful, the attacker can retrieve sensitive tokens and, with a recovered administrative token, obtain full control of the NetLicensing store. The vulnerability is not listed in CISA KEV, but the high CVSS score and potential for privilege escalation warrant prompt mitigation.