---
id: CVE-2025-67366
title: >-
  @sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content
  reading functionality
summary: >-
  @sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content
  reading functionality. Version 0.5.8 of filesystem-mcp contains a critical
  path traversal vulnerability in its "read_content" tool. This vulnerability
  arises fr…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-23
vendor: sylphx
product: filesystem_mcp
affected:
  - filesystem_mcp = 0.5.8
published: '2026-01-07'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T18:21:52.127'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-67366'
references:
  - url: 'https://github.com/sylphxltd/filesystem-mcp'
    label: cve@mitre.org
  - url: 'https://github.com/sylphxltd/filesystem-mcp/issues/134'
    label: cve@mitre.org
tags:
  - nvd
epss: 0.0061
epssPercentile: 0.47564
ingestedAt: '2026-09-16T19:02:30.701Z'
---

## Overview

@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of filesystem-mcp contains a critical path traversal vulnerability in its "read_content" tool. This vulnerability arises from improper symlink handling in the path validation mechanism: the resolvePath function checks path validity before resolving symlinks, while fs.readFile resolves symlinks automatically during file access. This allows attackers to bypass directory restrictions by leveraging symlinks within the allowed directory that point to external files, enabling unauthorized access to files outside the intended operational scope.

## Affected

- `filesystem_mcp = 0.5.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.