filesystem_mcp vulnerabilities

CVEs whose affected-version data names the filesystem_mcp package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-67366High· 7.5

8mo ago

@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality

@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of filesystem-mcp contains a critical path traversal vulnerability in its "read_content" tool. This vulnerability arises fr…

▾ Twilightsylphx · filesystem_mcpEPSS 0.61%via NVD