{"id":"CVE-2025-66689","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-66689","generatedAt":"2026-10-28T04:33:39.912Z","title":"A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system.","description":"A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() validation function that uses exact string matching against a blacklist of system directories. Attackers can bypass these restrictions by accessing subdirectories of blacklisted paths.","published":"2026-01-12T17:15:52.000Z","lastModified":"2026-06-17T09:57:11.000Z","status":"Analyzed","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-22","CWE-552"],"affected":["busymac/pal mcp server"],"epss":{"score":0.00571,"percentile":0.47029,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.57%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/BeehiveInnovations/zen-mcp-server/issues/293","tags":["Exploit","Issue Tracking","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://github.com/Team-Off-course/MCP-Server-Vuln-Analysis/blob/main/CVE-2025-66689.md","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-66689","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}