Information Exposure Affecting faf-mcp package, versions <2.1.3
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-JS-FAFMCP-21693828
- published24 Oct 2026
- disclosed19 Aug 2026
- creditUnknown
Introduced: 19 Aug 2026
CVE NOT AVAILABLE CWE-200 (opens in a new tab)How to fix?
Upgrade faf-mcp to version 2.1.3 or higher.
Overview
faf-mcp is a .FAF Context — persistent project context for Cursor, VS Code and every MCP-compatible IDE. IANA-registered .faf format. Curated core tools by default, full set via FAF_TOOLS=all.
Affected versions of this package are vulnerable to Information Exposure via the path argument in FAF tools. An attacker can access sensitive files or write arbitrary files outside the intended project directory by supplying crafted absolute paths or directory traversal sequences. This is only exploitable if the server is run against untrusted projects or processes attacker-controlled content.
Workaround
This vulnerability can be mitigated by running the server only against trusted local projects and setting the FAF_ALLOWED_ROOTS environment variable (in patched versions) to a single project directory to enforce a strict directory boundary.