NewApp Monitoring is liveSign up free
AgentbeamBeta
AI agent vulnerability · Other MCP servers and tools

CVE-2025-5273: Markdownify MCP Server allows attackers to read arbitrary files

mediumCVSS 4.0 6.9 · 3.1 6.5GHSA-22v8-p7h2-rj7p

All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server.

Published May 29, 2025

Affected packages

mcp-markdownify-server

Ecosystem
npm
Affected
<= 0.0.1
Fixed in
No patched version yet
Check
npm ls mcp-markdownify-server

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries