What is CVE-2025-53109?

CVE-2025-53109 is a vulnerability in Modelcontextprotocol Servers, classified under Improper Link Resolution Before File Access. Published 2025-07-02.

Is CVE-2025-53109 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Modelcontextprotocol Servers

CVE-2025-53109

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.

EPSS: 0.007 (49.2th percentile) — read the EPSS interpretation.

Affected products

Modelcontextprotocol Servers — versions < 0.6.4, < 2025.7.01

Weakness classification (CWE)

CWE-59 — Improper Link Resolution Before File Access

Public proof-of-concept exploits

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-53109?: CVE-2025-53109 is a vulnerability in Modelcontextprotocol Servers, classified under Improper Link Resolution Before File Access. Published 2025-07-02.
Is CVE-2025-53109 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.