sylphxltd CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH sylphxltd CVE published 2026-01-07

CVE-2025-67366

A critical path traversal vulnerability exists in @sylphxltd/filesystem-mcp version 0.5.8. The vulnerability arises from improper symlink handling in the path validation mechanism, allowing attackers to bypass directory restrictions and access files outside the intended operational scope. This issue can lead to unauthorized file access, potentially resulting in data breaches or system compromise. Defender [truncated]