GHSA-hc55-p739-j48w: @modelcontextprotocol/server-filesystem vulnerability allows for path validation bypass via colliding path prefix
GHSA-hc55-p739-j48w · CVE-2025-53110
- Advisory ID
- DURIN-MCP-2026-000005
- Severity
- high
- Publication state
- published
- Updated
Summary
@modelcontextprotocol/server-filesystem vulnerability allows for path validation bypass via colliding path prefix
This is a public advisory summary. Its publication state does not establish whether a particular deployed connection is affected or has been remediated.
Complete the browser check below for affected versions, remediation, revision history and attributed assessment evidence.