Skip to content
OpenAdvisories

Package · npm

fast-filesystem-mcp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2026-5327

    efforthye fast-filesystem-mcp index.ts handleGetDiskUsage command injection

    A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. The affected element is the function handleGetDiskUsage of the file src/index.ts. Performing a manipulation results in command injection. The attack is possible to be carried ou…

    efforthye fast-filesystem-mcp fast-filesystem-mcp npm
  • High 7.5
    CVE-2025-67364

    fast-filesystem-mcp has a Path Traversal vulnerability

    fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including fast_read_file. This vulnerability arises from improper path validation that fails to resolve symbolic links to their actual physical path…

    fast-filesystem-mcp npm