PT-2026-1881 · Sylphxltd · @Sylphxltd/Filesystem-Mcp

Published 2026-01-07 · Updated 2026-01-07 · CVE-2025-67366

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions @sylphxltd/filesystem-mcp version 0.5.8

Description @sylphxltd/filesystem-mcp version 0.5.8 contains a path traversal issue in the “read content” tool. The issue is due to improper symlink handling in the path validation mechanism. The resolvePath function checks path validity before resolving symlinks, while fs.readFile resolves symlinks automatically during file access. This allows attackers to bypass directory restrictions by using symlinks within the allowed directory that point to external files, potentially enabling unauthorized access to files outside the intended scope.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2025-67366

Affected Products

@Sylphxltd/Filesystem-Mcp

References · 5

• 🔥 https://github.com/sylphxltd/filesystem-mcp/issues/134 · Exploit
• https://osv.dev/vulnerability/CVE-2025-67366 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67366 · Security Note
• https://github.com/sylphxltd/filesystem-mcp · Note
• https://twitter.com/CVEnew/status/2008959527740428475 · Twitter Post