overleaf

This is an Overleaf API client with no clear evidence of intentionally included malware. It has a significant credential-disclosure risk: downloadOutputFile() sends session cookies and a CSRF token to any supplied URL, and cross-origin redirects preserve sensitive headers; a caller-controlled URL or malicious redirect can expose authentication credentials. Use only trusted download URLs and restrict redirects to the configured origin; severity is high for credential confidentiality when these paths are reachable.

The code provides an Overleaf MCP server and contains a significant local file-write path traversal risk in pull_project: malicious or crafted ZIP entry names can escape output_dir and overwrite files accessible to the process. The issue involves remote archive data flowing to filesystem writes; no suspicious domains, credentials, or malware behavior are evident. Severity is high for users extracting untrusted project archives; validate each resolved destination is contained within output_dir before writing.