ToolHive Secrets Exposure Vulnerability in Run Config Files

A vulnerability in ToolHive versions prior to 0.0.33 allows for the unintended storage of secrets in run configuration files. These files are used to restart stopped Model Context Protocol (MCP) server containers. As a result, an attacker with access to the user's home directory can read these secrets without needing to access the secrets store. This issue only affects secrets used in containers with active run configurations at the time.

Impact

The vulnerability leads to a low-severity exposure of secrets, allowing unauthorized access to sensitive information stored in run configuration files.

Remediation

Users can upgrade to ToolHive version 0.0.33, which addresses this vulnerability. For those using earlier versions, it is recommended to stop and delete any running MCP servers and manually remove any run configuration files from the appropriate directory based on the operating system.