Tools AI Risk Radar ai-incident-0299
Incident record
MCP filesystem move race can import an outside file
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- @modelcontextprotocol/server-filesystem
- Actor
- researcher
What happened
A local process racing a same-device move can replace the source parent directory and bring a file from outside the allowed directories into them. The maintainer verified the issue on POSIX systems and fixed it in filesystem package 2.3.0.
Sources
- GHSA-7m4x-rv66-mxhh maintainer advisorygithub.com/modelcontextprotocol/servers/security/advisories/…
- Reference-server release v2.4.0github.com/modelcontextprotocol/servers/releases/tag/v2.4.0
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 November 2026