⚠️ CVE-2026-7400 (CVSS 7.3) — filesystem-mcp-server Path Traversal

[afip-bot]

Security Advisory: CVE-2026-7400

CVSS Score: 7.3 (HIGH)
Published: 2026-04-29T20:16:31.393Z
Severity: HIGH

Description

A security vulnerability has been detected in geekgod382 filesystem-mcp-server 1.0.0. This issue affects the function is_path_allowed of the file server.py of the component read_file_tool/write_file_tool. Such manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Why this repo may be affected

This repository uses Python and may integrate with MCP (Model Context Protocol) servers for file operations. If filesystem-mcp-server is used, attackers could bypass path restrictions and access arbitrary files on the system.

Attack Vector

• Remote: Yes
• Authentication Required: No
• User Interaction: No
• Scope: Changed

Recommended Actions

1. Immediate: Search for filesystem-mcp-server usage: grep -r "filesystem-mcp\|is_path_allowed" .
2. Patch: Upgrade to version 1.1.0 or later (patch: 45364545fc60dc80aadcd4379f08042d3d3d292e)
3. Review: Audit all file access operations for path validation
4. Validate: Implement strict path canonicalization and whitelist-based access controls
5. Test: Add security tests for path traversal attempts

References

• https://github.com/geekgod382/filesystem-mcp-server/
• geekgod382/filesystem-mcp-server@4536454
• filesystem-mcp-server ALLOWED_PATHS Prefix-Check Bypass via read_file_tool / write_file_tool geekgod382/filesystem-mcp-server#1

Remediation Priority

HIGH - Path traversal vulnerability allowing unauthorized file access

---

Detected automatically by AFIP Risk Radar | Scan window: last 30h | CVE-2026-7400