Skip to content
OpenAdvisories

Product · modelcontextprotocol

servers

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-53109

    Model Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink Handling

    Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advi…

    modelcontextprotocol servers @modelcontextprotocol/server-filesystem npm
  • High 7.3
    CVE-2025-53110

    Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefix

    Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files in cases where the prefix matches an allowed directory.…

    modelcontextprotocol servers @modelcontextprotocol/server-filesystem npm