1. Conduid
  2. Documentation
  3. Vulnerable File Reader Server
MCP server · Documentation

Vulnerable File Reader Server

by · github.com/Eliran79/Vulnerable-file-reader-server

A deliberately vulnerable MCP server demonstrating command injection flaws. This Python implementation shows how lack of input sanitization in file paths leads to critical security vulnerabilities allowing attackers to execute arbitrary commands. For educational purposes only - demonstrates both the vulnerability and proper security practices.

Unclaimed last commit a year ago docs
InstallView source
34Low

Scored a month ago · breakdown

About Vulnerable File Reader Server

Vulnerable File Reader Server is an MCP server published by Eliran79 in the Documentation category: a deliberately vulnerable MCP server demonstrating command injection flaws. This Python implementation shows how lack of input sanitization in file paths leads to critical security vulnerabilities allowing attackers to execute arbitrary commands. For educational purposes only - demonstrates both the vulnerability and proper security practices.

The repository has 2 stars and 1 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/Eliran79/Vulnerable-file-reader-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Vulnerable File Reader Server

Powered by Claude · Grounded in docs

I know everything about Vulnerable File Reader Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Vulnerable File Reader Server

How do I install Vulnerable File Reader Server?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Vulnerable File Reader Server safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Vulnerable File Reader Server still maintained?

The last commit was a year ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.