fix: flowise-615

Author: 0xi4o

packages/components/nodes/tools/MCP/core.test.ts

@@ -617,5 +617,25 @@ describe('MCP Security Validations', () => {
                 }).not.toThrow()
             })
         })
+
+        it('should block absolute cwd', () => {
+            expect(() => {
+                validateMCPServerConfig({
+                    command: 'node',
+                    args: ['server.js'],
+                    cwd: '/tmp/evil'
+                })
+            }).toThrow('cwd parameter is not allowed in MCP server configuration')
+        })
+
+        it('should block relative cwd', () => {
+            expect(() => {
+                validateMCPServerConfig({
+                    command: 'node',
+                    args: ['server.js'],
+                    cwd: '../uploads'
+                })
+            }).toThrow('cwd parameter is not allowed in MCP server configuration')
+        })
     })
 })

packages/components/nodes/tools/MCP/core.ts

@@ -386,6 +386,10 @@ export const validateMCPServerConfig = (serverParams: any): void => {
         throw new Error('Invalid server configuration')
     }
 
+    if (serverParams.cwd !== undefined) {
+        throw new Error('cwd parameter is not allowed in MCP server configuration')
+    }
+
     // Command allowlist - operator-controlled via CUSTOM_MCP_ALLOWED_COMMANDS (empty = none allowed)
     const allowedCommands = (process.env.CUSTOM_MCP_ALLOWED_COMMANDS ?? '')
         .split(',')