High · published January 7, 2026
🚨 A crafty path traversal vulnerability in @sylphxltd/filesystem-mcp v0.5.8 allows unauthorized access to sensitive files, all thanks to sneaky symlinks! 🔥 Think of it like a hotel with restricted access to certain floors. If someone finds a staff-only keycard that opens a door to the secret floor, they can roam freely into areas they shouldn't be in, checking out every room! An attacker could exploit this vulnerability to read confidential files outside the intended access scope. This means they can access sensitive data, potentially leading to catastrophic data leaks or unauthorized information exposure. We’re talking about a serious breach of trust and security here!
Think of it like a hotel with restricted access to certain floors. If someone finds a staff-only keycard that opens a door to the secret floor, they can roam freely into areas they shouldn't be in, checking out every room! This vulnerability stems from improper symlink handling in the 'read_content' tool of filesystem-mcp. The resolvePath function incorrectly checks path validity before resolving symlinks, allowing attackers to bypass directory restrictions and access files they shouldn't be able to.
An attacker could exploit this vulnerability to read confidential files outside the intended access scope. This means they can access sensitive data, potentially leading to catastrophic data leaks or unauthorized information exposure. We’re talking about a serious breach of trust and security here! Patch to version 0.5.9 as soon as possible to close this loophole. Also, perform an audit of current symlinks and ensure proper path validation mechanisms are in place. Don’t forget to review your file access permissions! You've got this! Follow these steps to secure your system – and become a security hero! 🦸♂️
| Product | Versions | Fixed in |
|---|---|---|
| sylphx/filesystem_mcp | all versions | — |