CVE-2025-53109

CVE Enrichment

CVSS: 7.3 HIGH
EPSS: 0.77%
EPSS Percentile: 54.71%
CISA KEV: Not listed

Description

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: security-advisories@github.com
Published: 02-Jul-2025 22:15
Last Modified: 17-Jun-2026 16:37
EPSS Date: 2026-10-20
CWE: CWE-59

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:P /
                            PR:N /
                            UI:P /
                            VC:N /
                            VI:N /
                            VA:H /
                            SC:H /
                            SI:H /
                            SA:H /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

References

Last enrichment sync: 21-Oct-2026 18:10
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

own filesystem MCP tools exhibited sandbox escape vulnerabilities (CVE-2025-53109 and Cisco’s 2026 AI Security Report Highlights Agentic and Supply Chain Risks

CVE (2)

Malware (1)

People (1)

Threat Actors (4)

MITRE ATT&CK (5)

Vendors (10)

Products (8)

Tools (6)

Countries (7)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.