@modelcontextprotocol/server-filesystem@2025.3.28 vulnerabilities
MCP server for filesystem access
latest version
2025.7.1
latest non vulnerable version
first published
7 months ago
latest version published
16 days ago
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the @modelcontextprotocol/server-filesystem package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
@modelcontextprotocol/server-filesystem is a MCP server for filesystem access Affected versions of this package are vulnerable to Directory Traversal in the path validation process. An attacker can access unintended files by supplying a path with a colliding prefix that matches an allowed directory. How to fix Directory Traversal? Upgrade | <2025.7.1 |
@modelcontextprotocol/server-filesystem is a MCP server for filesystem access Affected versions of this package are vulnerable to Symlink Attack via improper validation of file paths and handling of symbolic links. An attacker can gain unauthorized access to files outside the intended directory by crafting symlinks within permitted directories. How to fix Symlink Attack? Upgrade | <2025.7.1 |