High severityOSV Advisory· Published Jul 2, 2025· Updated Apr 15, 2026
CVE-2025-53110
CVE-2025-53110
Description
Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
@modelcontextprotocol/server-filesystemnpm | <= 0.6.2 | — |
@modelcontextprotocol/server-filesystemnpm | >= 2025.1.14, < 2025.7.1 | 2025.7.1 |
Affected products
2- Range: 0.1.0, 0.2.0, 0.3.0, …
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.