CVE-2025-53109highBroken access control2025-07-01
CVE-2025-53109: @modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling
Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 2025.7.1 to resolve.
What it is
Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 2025.7.1 to resolve.
How to check
- Affected: @modelcontextprotocol/server-filesystem (npm) <= 0.6.2.
- Affected: @modelcontextprotocol/server-filesystem (npm) >= 2025.1.14, < 2025.7.1.
- Compare your installed version with the range above (command below).
How to fix
- No patched version of @modelcontextprotocol/server-filesystem is listed yet. Follow the advisory for mitigations.
- Upgrade @modelcontextprotocol/server-filesystem to 2025.7.1 or later.
npm ls @modelcontextprotocol/server-filesystemSources
More advisories for this tool
- criticalCVE-2026-96620: Claude Agent SDK (Python) resume option lets attackers run commands
- criticalCVE-2026-95182: DeepSeek Harness can be tricked into running a planted fake npx
- criticalLangflow: adding an MCP server runs any command on the host (CVE-2026-105697, CVE-2026-105740)
- criticalCVE-2026-32871: FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability