InnoShop MCP uploads can disclose server files

What happened

The AI Core MCP upload tool accepts a local file as its source and copies its contents into publicly accessible media storage.

The CVE was published on 10 October; the original researcher publication date is unconfirmed. Exploitation requires an authenticated administrator token with file-creation permission, MCP enabled and MCP write operations enabled. Both MCP settings default to off. The file must be readable by the server process. The CNA gives CVSS 3.1 score 4.4. Patch status remains unconfirmed as of 11 October.