Path Traversal Flaw in fast-filesystem-mcp by EffortHye

CVE-2025-67364

What is CVE-2025-67364?

The fast-filesystem-mcp version 3.4.0 is affected by a path traversal vulnerability that stems from insufficient path validation during file operations. This issue allows attackers to create symbolic links within permitted directories that point to restricted system paths, effectively bypassing access controls. When these symlinks are accessed, the functions responsible for validating paths are circumvented, granting unauthorized access to sensitive files that should remain protected.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References