CVE-2025-53110highBroken access control2025-07-01
CVE-2025-53110: @modelcontextprotocol/server-filesystem vulnerability allows for path validation bypass via colliding path prefix
Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to upgrade to 2025.7.1 to resolve the issue.
What it is
Versions of Filesystem prior to 0.6.3 & 2025.7.1 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to upgrade to 2025.7.1 to resolve the issue.
How to check
- Affected: @modelcontextprotocol/server-filesystem (npm) <= 0.6.2.
- Affected: @modelcontextprotocol/server-filesystem (npm) >= 2025.1.14, < 2025.7.1.
- Compare your installed version with the range above (command below).
How to fix
- No patched version of @modelcontextprotocol/server-filesystem is listed yet. Follow the advisory for mitigations.
- Upgrade @modelcontextprotocol/server-filesystem to 2025.7.1 or later.
npm ls @modelcontextprotocol/server-filesystemSources
More advisories for this tool
- criticalCVE-2026-96620: Claude Agent SDK (Python) resume option lets attackers run commands
- criticalCVE-2026-95182: DeepSeek Harness can be tricked into running a planted fake npx
- criticalLangflow: adding an MCP server runs any command on the host (CVE-2026-105697, CVE-2026-105740)
- criticalCVE-2026-32871: FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability