PT-2025-31848 · Anthropic · Filesystem Mcp Server+1

Published 2025-08-02 · Updated 2025-08-04 · CVE-2025-547954

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Claude (affected versions not specified)

Description The Claude code exhibits vulnerabilities related to path validation. The system is generally scoped to a current working directory and requests user consent when accessing unfamiliar files or executing commands outside of a predefined set. While dangerous commands are typically blocked or require explicit user confirmation, a prefix-based path validation flaw allows containment bypass, similar to a previously demonstrated issue in Anthropic’s Filesystem MCP Server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-13142

CVE-2025-547954

Affected Products

Claude

Filesystem Mcp Server

References · 8

• https://bdu.fstec.ru/vul/2025-13142 · Security Note
• https://github.com/anthropics/claude-code/security/advisories/GHSA-x56v-x2h6-7j34 · Note
• https://cyberpress.org/security-flaw-in-claude · Note
• https://t.me/secharvester/19789 · Telegram Post
• https://cybersecuritynews.com/claude-vulnerabilities · Note
• https://cymulate.com/blog/cve-2025-547954-54795-claude-inverseprompt · Note
• https://dbugs.ptsecurity.com/vulnerability/CVE-2025-54795 · Note
• https://t.me/RNetsec/21845 · Telegram Post