GHSA-j893-m93w-jwjw
High · 7.5CVSS
7.5
EPSS
—
Published
Jan 7, 2026
CISA due date
—
The record
fast-filesystem-mcp has a Path Traversal vulnerability
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | fast-filesystem-mcp | 0 | No fix |
Related vulnerabilities
- CVE-2025-67364 fast-filesystem-mcp has a Path Traversal vulnerability Same vulnerability
- GHSA-5226-3rvg-hp4x fast-filesystem-mcp is vulnerable to command injection through handleGetDiskUsage function Also affects fast-filesystem-mcp
- CVE-2026-5327 A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1. Also affects fast-filesystem-mcp
- CVE-2026-14947 A high-privileged remote attacker can upload malicious ZIP archive containing directory… CWE-24
- CVE-2026-76353 In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does… CWE-24
- CVE-2026-73573 In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in… CWE-24
- CVE-2026-66140 Exim before 4.99.5 allows directory traversal to access files outside of the spool area… CWE-24
- CVE-2026-44942 A path traversal in handling the "path" component of .repo files processed by libzypp… CWE-24