MCP Filesystem capitalization bypass on case-insensitive symlink path

Evidence record

Read the original source ↗

Claim-level citations (2)

• supportsMCP Filesystem symlink containment diverged under case folding: The official advisory shows resolveUnicodeEquivalentPath missing a case-variant link while the underlying filesystem followed the link to a target outside the allowed tree.

  Summary; Linux casefolded reproduction; fixed 2.0.1

• supportsMCP Filesystem symlink containment diverged under case folding: GHSA-4gxg-m5jx-9j57 documents a local case-insensitive-filesystem bypass of the MCP allowed-directories symlink check affecting creation, writing and move destinations; version 2.0.1 is listed as patched.

  Summary; affected write/create/move destination operations and patched versions