Vulnerability Description
A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() validation function that uses exact string matching against a blacklist of system directories. Attackers can bypass these restrictions by accessing subdirectories of blacklisted paths.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Busymac | Pal Mcp Server | < 9.8.2 |
Related Weaknesses (CWE)
References
- https://github.com/BeehiveInnovations/zen-mcp-server/issues/293ExploitIssue TrackingThird Party Advisory
- https://github.com/Team-Off-course/MCP-Server-Vuln-Analysis/blob/main/CVE-2025-6ExploitThird Party Advisory
FAQ
What is CVE-2025-66689?
CVE-2025-66689 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_da...
How severe is CVE-2025-66689?
CVE-2025-66689 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-66689?
Check the references section above for vendor advisories and patch information. Affected products include: Busymac Pal Mcp Server.