CVE-2025-53109: Path validation bypass via symlink handling in @modelcontextprotocol/server-filesystem

github.com 2025-07-06中国語 →English →

Security AdvisoryCVE-2025-53109Highmodelcontextprotocol

Affected:

@modelcontextprotocol/server-filesystem < 0.6.3
@modelcontextprotocol/server-filesystem < 2025.3.28

Fixed in:

0.6.3
2025.7.01

参照 CVE: CVE-2025-53109

文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档

本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。

このソースからの他の記事

Redis Stream RDB Corruption Fix: Shared NACK Data Structure Validation 2026-07-25 Redis Multiple Versions RCE Analysis (CVE-2026-25243/25589) and POC Exploits 2026-07-25 Knot Resolver 6.3.0 DoQ Heap Buffer Overflow RCE Vulnerability and PoC 2026-07-25 CISA Advisory ICSA-26-204-03: Defense against Social Engineering in Industrial Control Systems 2026-07-25 CVE-2026-55985: Tycon Systems TPOIN Monitor Web Interface Credential Disclosure Vulnerability 2026-07-25

离线存档

离线截图 & PDF 为 Pro 专属