CVE-2025-67366

{
  "id": "CVE-2025-67366",
  "sourceIdentifier": "[email protected]",
  "published": "2026-01-07T17:16:01.893",
  "lastModified": "2026-11-04T22:10:00.210",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of filesystem-mcp contains a critical path traversal vulnerability in its \"read_content\" tool. This vulnerability arises from improper symlink handling in the path validation mechanism: the resolvePath function checks path validity before resolving symlinks, while fs.readFile resolves symlinks automatically during file access. This allows attackers to bypass directory restrictions by leveraging symlinks within the allowed directory that point to external files, enabling unauthorized access to files outside the intended operational scope."
    },
    {
      "lang": "es",
      "value": "@sylphxltd/filesystem-mcp v0.5.8 es un servidor MCP que proporciona funcionalidad de lectura de contenido de archivos. La versión 0.5.8 de filesystem-mcp contiene una vulnerabilidad crítica de salto de ruta en su herramienta ’read_content’. Esta vulnerabilidad surge de un manejo inadecuado de symlinks en el mecanismo de validación de rutas: la función resolvePath verifica la validez de la ruta antes de resolver los symlinks, mientras que fs.readFile resuelve los symlinks automáticamente durante el acceso a archivos. Esto permite a los atacantes eludir las restricciones de directorio aprovechando symlinks dentro del directorio permitido que apuntan a archivos externos, lo que permite el acceso no autorizado a archivos fuera del alcance operativo previsto."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-01-07T17:17:41.455113Z",
          "id": "CVE-2025-67366",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-23"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:sylphx:filesystem_mcp:0.5.8:*:*:*:*:node.js:*:*",
              "matchCriteriaId": "27F53BC2-DB37-4624-B849-21A3A96950F0"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/sylphxltd/filesystem-mcp",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://github.com/sylphxltd/filesystem-mcp/issues/134",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    }
  ]
}