pdf-reader-mcp

Security Findings (110)

• HighAS-012

  🔄Tool Drift

  Tool set changed silently at v4.1.3: 45 tool(s) added, 4 tool(s) removed without a version bump.

  + 45 added

  activate-automationactivate-document-linkadd-pdf-securityarchive-documentcheck-job-statuscompress-pdf-fileconvert-pdf-to-imageconvert-pdf-with-ocrcreate-automationcreate-documentcreate-document-linkcreate-pdf-filedeactivate-automationdeactivate-document-linkdelete-automationdelete-documentdelete-document-linkdelete-pdf-pagesduplicate-automationextract-pdf-pagesget-automationget-documentget-document-analyticsget-document-sessionlist-automation-executionslist-automationslist-document-annotationslist-document-form-submissionslist-document-linkslist-document-sessionslist-documentsmake-document-privatemake-document-publicmerge-pdf-filesoverlay-pdf-pagesread-pdf-contentread-pdf-content-with-ocrread-pdf-metadataremove-pdf-securityrotate-pdf-pagessearch-pdf-contentsearch-pdf-content-with-ocrsplit-pdf-fileunarchive-documentunderlay-pdf-pages

  − 4 removed

  convert_fileconvert_htmlconvert_markdownget_account

  Fix: The set of tools exposed by this server changed between scans of the same version — a sign the package was silently updated without a version bump. Audit the changelog and all tool definitions before trusting this server. Pin to a specific commit hash rather than a floating version tag.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×27

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  create-documentunarchive-documentget-document-analyticsget-automationcreate-automationdelete-automationdeactivate-automationduplicate-automationlist-automation-executionscreate-pdf-filesplit-pdf-filemerge-pdf-filescompress-pdf-fileconvert-pdf-to-imageextract-pdf-pagesdelete-pdf-pagesrotate-pdf-pagesoverlay-pdf-pagesunderlay-pdf-pagessearch-pdf-contentread-pdf-contentconvert-pdf-with-ocrsearch-pdf-content-with-ocrread-pdf-content-with-ocradd-pdf-securityremove-pdf-securityread-pdf-metadata

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions

  create-pdf-file:input schema exposes 14 properties (threshold: 10)

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×45

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  list-documentsget-documentcreate-documentdelete-documentarchive-documentunarchive-documentmake-document-publicmake-document-privatelist-document-linkscreate-document-linkdelete-document-linkactivate-document-linkdeactivate-document-linklist-document-annotationslist-document-form-submissionsget-document-analyticslist-document-sessionsget-document-sessionlist-automationsget-automationcreate-automationdelete-automationactivate-automationdeactivate-automationduplicate-automationlist-automation-executionscreate-pdf-filesplit-pdf-filemerge-pdf-filescompress-pdf-fileconvert-pdf-to-imageextract-pdf-pagesdelete-pdf-pagesrotate-pdf-pagesoverlay-pdf-pagesunderlay-pdf-pagessearch-pdf-contentread-pdf-contentconvert-pdf-with-ocrsearch-pdf-content-with-ocrread-pdf-content-with-ocradd-pdf-securityremove-pdf-securityread-pdf-metadatacheck-job-status

  Fix: Review and remediate the identified issue.

• InfoAS-002

  ⚠️Excessive Permissions ×30

  declared capabilities: network access, filesystem access

  create-documentsplit-pdf-filemerge-pdf-filesextract-pdf-pagesdelete-pdf-pagesrotate-pdf-pagesoverlay-pdf-pagesunderlay-pdf-pagessearch-pdf-contentread-pdf-contentread-pdf-metadata

  declared capabilities: filesystem access

  delete-documentcreate-document-linkdelete-document-link

  declared capabilities: HTTP requests

  unarchive-documentget-automationduplicate-automation

  declared capabilities: network access

  get-document-analytics

  declared capabilities: network access, filesystem access, HTTP requests

  create-automationcreate-pdf-filecompress-pdf-fileconvert-pdf-to-imageconvert-pdf-with-ocrsearch-pdf-content-with-ocrread-pdf-content-with-ocradd-pdf-securityremove-pdf-security

  declared capabilities: code/command execution, filesystem access

  delete-automation

  declared capabilities: code/command execution

  deactivate-automationlist-automation-executions

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-010

  🔑Insecure Secret Handling ×6

  input parameter "token" accepts a credential (informational; not evidence of insecure handling)

  delete-document-linkactivate-document-linkdeactivate-document-link

  input parameter "user_password" accepts a credential (informational; not evidence of insecure handling)

  add-pdf-security

  input parameter "owner_password" accepts a credential (informational; not evidence of insecure handling)

  add-pdf-security

  input parameter "password" accepts a credential (informational; not evidence of insecure handling)

  remove-pdf-security

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.