AIKIDO-2025-10918

TL;DR

Affected versions of this package are vulnerable to Unrestricted File System Access via RPC Handlers, where handlers such as readFile, writeFile, listDirectory, and getDirectoryTree provide authenticated remote clients with complete file system access without path restrictions or sandboxing, allowing the reading and writing of any file the process can access. An attacker who obtains authentication credentials can exploit this to read sensitive files such as SSH keys, exfiltrate private repository contents via getDirectoryTree and readFile calls, write malicious code to startup files like .bashrc, and access AWS credentials, npm tokens, and other sensitive data stored in the user's home directory.