Files or Directories Accessibility Vulnerability in MCP Markdownify Server

CVE-2025-5273

What is CVE-2025-5273?

The mcp-markdownify-server package is affected by a vulnerability that enables unauthorized access to files or directories through its get-markdown-file tool. An attacker can exploit this flaw by crafting a specific prompt that, when processed by the server, allows them to read arbitrary files residing on the host machine. This compromise can lead to data exposure, making it critical for users and administrators to secure their setups against such threats.

References