AI agent vulnerability · Other MCP servers and tools

CVE-2025-67364: fast-filesystem-mcp has a Path Traversal vulnerability

highCVSS 3.1 7.5GHSA-j893-m93w-jwjw

fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including fastreadfile. This vulnerability arises from improper path validation that fails to resolve symbolic links to their actual physical paths.

Published Jan 7, 2026 · Updated Jan 8, 2026

Affected packages

fast-filesystem-mcp

Ecosystem: npm
Affected: <= 3.4.0
Fixed in: No patched version yet
Check: npm ls fast-filesystem-mcp

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including fast_read_file. This vulnerability arises from improper path validation that fails to resolve symbolic links to their actual physical paths. The safePath and isPathAllowed functions use path.resolve() which does not handle symlinks, allowing attackers to bypass directory access restrictions by creating symlinks within allowed directories that point to restricted system paths. When these symlinks are accessed through valid path references, the validation checks are circumvented, enabling access to unauthorized files.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries