CVE-2025-67364 fast-filesystem-mcp has a Path Traversal vulnerability
Attackers can bypass directory restrictions via symlinks to read unauthorized files in fast-filesystem-mcp.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-67364?
CVE-2025-67364 is a high-severity path traversal vulnerability in n/a, published on 7 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including fast_read_file. This vulnerability arises from improper path validation that fails to resolve symbolic links to their actual physical paths. The safePath and isPathAllowed functions use path.resolve() which does not handle symlinks, allowing attackers to bypass directory access restrictions by creating symlinks within allowed directories that point to restricted system paths. When these symlinks are accessed through valid path references, the validation checks are circumvented, enabling access to unauthorized files.
Weakness: CWE-24
Which versions are affected by CVE-2025-67364?
2 open source packages ship an affected version, including fast-filesystem-mcp. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
fast-filesystem-mcp npm | All versions to 3.4.0 | None |
fast-filesystem-mcp npm | All versions to 3.4.0 | None |
Products include Efforthye Fast-Filesystem-Mcp.
How do I fix CVE-2025-67364?
No fix has been published for CVE-2025-67364 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-67364 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-67364 exists.
Sources
Also known as GHSA-j893-m93w-jwjw.