We found a path traversal in an MCP server with 7,700 stars that lets AI agents read your SSH keys. Fix merged.