ESCAPEROUTE: BREAKING THE SCOPE OF ANTHROPIC'S FILESYSTEM MCP SERVER (CVE-2025-53109 & CVE-2025-53110)

Summary from the TLDR InfoSec newsletter

Cymulate Research Labs discovered critical vulnerabilities in Anthropic's Model Context Protocol (MCP) Filesystem Server. Two high-severity flaws (CVE-2025-53110 and CVE-2025-53109) allow attackers to escape sandboxes, access any host files, and execute arbitrary code through directory containment bypass and symlink exploitation.