CVE-2025-67366

{"id": "CVE-2025-67366", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-67366", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-07T17:17:41.455113Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-01-07T17:16:01.893", "references": [{"url": "https://github.com/sylphxltd/filesystem-mcp", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/sylphxltd/filesystem-mcp/issues/134", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-23"}]}], "descriptions": [{"lang": "en", "value": "@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of filesystem-mcp contains a critical path traversal vulnerability in its \"read_content\" tool. This vulnerability arises from improper symlink handling in the path validation mechanism: the resolvePath function checks path validity before resolving symlinks, while fs.readFile resolves symlinks automatically during file access. This allows attackers to bypass directory restrictions by leveraging symlinks within the allowed directory that point to external files, enabling unauthorized access to files outside the intended operational scope."}, {"lang": "es", "value": "@sylphxltd/filesystem-mcp v0.5.8 es un servidor MCP que proporciona funcionalidad de lectura de contenido de archivos. La versi\u00f3n 0.5.8 de filesystem-mcp contiene una vulnerabilidad cr\u00edtica de salto de ruta en su herramienta \u2019read_content\u2019. Esta vulnerabilidad surge de un manejo inadecuado de symlinks en el mecanismo de validaci\u00f3n de rutas: la funci\u00f3n resolvePath verifica la validez de la ruta antes de resolver los symlinks, mientras que fs.readFile resuelve los symlinks autom\u00e1ticamente durante el acceso a archivos. Esto permite a los atacantes eludir las restricciones de directorio aprovechando symlinks dentro del directorio permitido que apuntan a archivos externos, lo que permite el acceso no autorizado a archivos fuera del alcance operativo previsto."}], "lastModified": "2026-11-04T22:10:00.210", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sylphx:filesystem_mcp:0.5.8:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "27F53BC2-DB37-4624-B849-21A3A96950F0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}