What happened
phpMyFAQ's MCP server faq_search tool returns results without enforcing the database user/group permission filters applied in the normal web search path. Restricted FAQ content is therefore readable by any MCP client that can reach the server.
Why it matters
Knowledge-base MCP servers are frequently wired straight into RAG pipelines where the enclosing app assumes the MCP layer enforces the same ACLs as the UI. This gap means confidential internal FAQ entries become visible to agents and anyone with MCP endpoint access — a silent authorization boundary loss on the agent path.
Attack vector
A client connected to the phpmyfaq:mcp:server issues faq_search queries; Search::searchDatabase() never applies user or group permission checks, so restricted FAQ questions and answers are returned in full.
Affected systems
phpMyFAQ (thorsten) 4.1.0 through 4.1.10 (MCP server faq_search tool)
Mitigation
No released fix at publication; restrict access to the MCP server or apply the search.permission checks in the faq_search executor (VulnCheck advisory).