2025-06 · 2025-Q2
Anthropic Filesystem MCP Server "EscapeRoute"
Layer tags: not yet tagged.
Target
Anthropic Filesystem MCP Server
Impact
Sandbox escape, arbitrary file access, root-level compromise possible
Root Cause
Naive startswith path validation; no symlink validation