VULNERABILITY INTELLIGENCE

CVE-2025-66689

CVSS score6.5 MEDIUM
EPSS probability0.57%
CISA KEVNot currently listed
Published2026-01-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() validation function that uses exact string matching against a blacklist of system directories. Attackers can bypass these restrictions by accessing subdirectories of blacklisted paths.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-22

Primary references