AIKIDO-2026-849110
rust-mcp-filesystem is vulnerable to Path Traversal
81
High Risk
This Affects:
rust-mcp-filesystemTL;DR
The MCP filesystem server validates request paths through a normalize_path helper that falls back to the unsanitized path whenever canonicalize fails for a target that does not exist. Requests carrying .. parent-directory components or symlinks then resolve outside the configured allowed directories during write, create, move, and edit operations. A caller can read or modify arbitrary files on the host, escaping the intended sandbox. The fix routes filesystem operations through an open directory handle and rejects parent-directory components and symlink escapes.
Who does this affect?
You are affected if you run rust-mcp-filesystem on an affected version as an MCP server and expose its write/create/move/edit tools to a client or model whose requested file paths can be externally influenced.
Background info
rust-mcp-filesystem is vulnerable to Path Traversal in versions 0.4.1 - 0.4.3.
How to fix this
Upgrade the rust-mcp-filesystem library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.