MCP Filesystem quote normalization authorizes sibling outside allowlist

Evidence record

Read the original source ↗

Claim-level citations (2)

• supportsMCP Filesystem validated one path spelling and used another: The server-filesystem advisory reproduces read outside allowedDirectories because validatePath trims a trailing quote for comparison while subsequent file access uses the original pathname.

  Impact; reproduction using sibling path with trailing quote; upgrade warning

• supportsMCP Filesystem validated one path spelling and used another: GHSA-7rgq-gccq-qphx reports an MCP Filesystem path validation inconsistency in which the checked spelling strips trailing quotes or whitespace while the filesystem operation uses the original path; 2.0.1 is listed as patched.

  Summary; validation versus realpath identity and affected version/patch table