Filesystem Mcp Server
Monthly
Path traversal in geekgod382 filesystem-mcp-server 1.0.0 allows unauthenticated remote attackers to read or write files outside the server's intended allowed directories by supplying path sequences that bypass the flawed `is_path_allowed()` check in `server.py`. Both `read_file_tool` and `write_file_tool` are affected, enabling arbitrary file exfiltration or overwrite on the host. A public exploit POC exists on GitHub; SSVC rates this as automatable with partial technical impact, though EPSS at 0.05% (16th percentile) reflects the product's niche deployment footprint rather than low exploitability. No CISA KEV listing. Vendor-released patch v1.1.0 is available.
Path traversal in geekgod382 filesystem-mcp-server 1.0.0 allows unauthenticated remote attackers to read or write files outside the server's intended allowed directories by supplying path sequences that bypass the flawed `is_path_allowed()` check in `server.py`. Both `read_file_tool` and `write_file_tool` are affected, enabling arbitrary file exfiltration or overwrite on the host. A public exploit POC exists on GitHub; SSVC rates this as automatable with partial technical impact, though EPSS at 0.05% (16th percentile) reflects the product's niche deployment footprint rather than low exploitability. No CISA KEV listing. Vendor-released patch v1.1.0 is available.