PT-2026-53141 · Npm · @Bitbonsai/Mcpvault

Published 2026-06-18 · Updated 2026-06-18

OSV

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

On case-insensitive filesystems (macOS, Windows), PathFilter compiled its deny-list patterns case-sensitively and matched the path verbatim, so names like .Git/config, .GIT/config, or .oBsIdIaN/secrets.md slipped past the .git/.obsidian/node modules restriction while the OS opened the real file. On Windows, trailing dots/spaces (.git./config, .git /config) bypassed it the same way. Affects both isAllowed (read/write/move/search) and isAllowedForListing. Vault-root .. containment is NOT affected. Fixed in 0.11.4 by case-insensitive matching plus per-segment canonicalization before the deny-list check. Reported privately by novice-22.

Fix

Weakness Enumeration

CWE-41

CWE-178

Related Identifiers

GHSA-J99Q-93C9-H869

Affected Products

@Bitbonsai/Mcpvault

References · 3

• https://osv.dev/vulnerability/GHSA-j99q-93c9-h869 · Vendor Advisory
• https://github.com/bitbonsai/mcpvault · Note
• https://github.com/bitbonsai/mcpvault/security/advisories/GHSA-j99q-93c9-h869 · Note