Skip to content
fr Sign in
7.3 High

CVE-2025-53109 Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP)

Description

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.

Affected products and versions

Product Affected versions Fixed in
servers 2025.7 earliest → < 2025.7.01 2025.7.01
servers 0.6 earliest → < 0.6.4 0.6.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of servers

The 6 CVEs of servers →
CVE-2026-27735 Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP) 6.4 Medium CVE-2025-68145 In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict… 6.4 Medium CVE-2025-68144 In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments… 6.3 Medium CVE-2025-68143 Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP) 6.5 Medium
Track this CVE