The vulnerability is a path traversal flaw that arises from unsafe handling of the filePath argument in the fs.readFileSync call within src/tools/campaign-management.ts of the Media Upload component. By manipulating the path string, an attacker can cause the program to read any file on the file system that the process can access. The likely attack vector is from a remote request to the media‑upload endpoint, and the public disclosure suggests that an attacker could leverage this to exfiltrate sensitive configuration, credentials or system files.

The affected product is the danielpopamd LinkedIn Ads MCP tool, version 1.0.0. The flaw resides in the Media Upload feature of this version, and the component name is campaign-management.ts.

The CVSS score of 6.9 indicates a moderate severity, and while an EPSS score is not available, the fact that the exploit has been publicly disclosed and can be performed remotely elevates the risk to a moderate level. The vulnerability is not listed in the CISA KEV catalog, but the lack of a patch and the remote nature of the attack vector mean that a targeted compromise could be achieved if the application is publicly exposed.