Anthropic Filesystem MCP Server: Directory Access Bypass via Improper Path Validation · Embrace The Red

A vulnerability in Anthropic’s Filesystem MCP Server allowed AI access to files and directories beyond the intended scope due to improper path validation. The issue, reported in June 2025, was fixed in a subsequent release.