Efforthye CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Efforthye CVE published 2026-01-07

CVE-2025-67364

CVE-2025-67364 is a critical path traversal vulnerability in fast-filesystem-mcp version 3.4.0. The vulnerability arises from improper path validation that fails to resolve symbolic links to their actual physical paths, allowing attackers to bypass directory access restrictions. This vulnerability impacts fast-filesystem-mcp deployments, enabling attackers to access unauthorized files. Defenders should as [truncated]