Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-67366: Filesystem MCP 0.5.8 allows attackers to access unauthorized files

CVE-2025-67366 · published 10 months ago

Summary

An attacker can use a clever trick with links to access files they shouldn't be able to see. This happens because the software doesn't properly check links when accessing files. Update to the latest version to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
sylphx	filesystem-mcp	0.5.8 `cpe:2.3:a:sylphx:filesystem-mcp:0.5.8:::::node.js::`
sylphx	filesystem_mcp	0.5.8 `cpe:2.3:a:sylphx:filesystem_mcp:0.5.8:::::node.js::`

Original advisory text

@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of filesystem-mcp contains a critical path traversal vulnerability in its "read_content" tool. This vulnerability arises from improper symlink handling in the path validation mechanism: the resolvePath function checks path validity before resolving symlinks, while fs.readFile resolves symlinks automatically during file access. This allows attackers to bypass directory restrictions by leveraging symlinks within the allowed directory that point to external files, enabling unauthorized access to files outside the intended operational scope.

References

https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/67xxx/CVE-2025-67366... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-67366 Vendor Advisory
https://github.com/sylphxltd/filesystem-mcp Product
https://github.com/sylphxltd/filesystem-mcp/issues/134 Exploit Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-23Relative Path Traversal

Timeline

Published7 Jan 2026

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-67366 · NVD

CVE-2025-67366 · OSV

Track software like this

Free during beta