Model Context Protocol Servers Filesystem Path Validation Bypass Vulnerability

A path validation bypass vulnerability has been identified in Model Context Protocol Servers, specifically in the Filesystem component. This issue affects versions prior to 0.6.4 or 2025.7.01. The vulnerability arises because the software may inadvertently allow access to unintended files when the file prefix aligns with an authorized directory.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files, potentially allowing for the disclosure of sensitive information.

Remediation

Users are advised to upgrade to version 0.6.4 or 2025.7.01.