High severityOSV Advisory· Published Jul 2, 2025· Updated Apr 15, 2026
CVE-2025-53109
CVE-2025-53109
Description
Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@modelcontextprotocol/server-filesystemnpm | <= 0.6.2 | — |
@modelcontextprotocol/server-filesystemnpm | >= 2025.1.14, < 2025.7.1 | 2025.7.1 |
Affected products
2- Range: 0.1.0, 0.2.0, 0.3.0, …
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.