The ACE-MCP get_file_snippet function, part of the MCP Tool, accepts a projectRootPath and filePath supplied by a client. An attacker can manipulate these inputs to read files outside the intended project directory, including sensitive system files such as /etc/hosts. This flaw is classed as a path traversal weakness (CWE‑22) and is exploitable remotely, allowing a threat actor to retrieve arbitrary files from the host machine. The CVSS score of 5.3 indicates a moderate risk, and the publicly available exploit on GitHub confirms that the weakness can be actively used in the wild.

Code contributors and users of 0215AndrewFeng’s ACE‑MCP product, specifically versions up to and including 4.10.8, are impacted. No other vendors or product lines are referenced in the documentation. The vulnerability is tied to the getFileSnippet.ts component of the MCP Tool.

Because the attack does not require elevated privileges and only relies on client input, any user who can invoke the get_file_snippet endpoint can potentially read arbitrary files. The exploit is already public on GitHub, and the lack of an official fix or response from the project increases the attack surface. Although the EPSS score is unavailable, the moderate CVSS suggests significant exploitation potential, and the issue is not yet listed in CISA’s KEV catalog.