v0.137.0
0.137.0 (2026-08-07)
Security
Fixes GHSA-9w34-3f56-vwmh (high).
.env was read from whatever directory the MCP client launched the server in, so
any file sitting there could set every MS365_MCP_* variable. That included
MS365_MCP_AUTH_CACHE_COMMAND, which is spawned at startup before any
authentication, so opening an untrusted project could run its code.
Only MS365_MCP_CLIENT_ID, MS365_MCP_CLIENT_SECRET, MS365_MCP_TENANT_ID and
MS365_MCP_CLOUD_TYPE are read from .env now. Everything else is ignored, with a
warning on stderr naming the variables that were skipped.
MS365_MCP_AUTH_CACHE_COMMAND must also be an absolute path.
Upgrading
If you keep other MS365_MCP_* variables in .env, move them to your shell or MCP
client config. Watch MS365_MCP_TOKEN_CACHE_PATH: it silently falls back to the
default, so you will look logged out.