Published at 10/26/2026, 7:07:05 AM · 44 views
📰 MCP reference servers v2.1.0 fix eight vulnerabilities: upgrade filesystem and everything to 2.0.1 and fetch to 2026.10.24
On Oct 25 (UTC) the official Model Context Protocol servers repo shipped v2.1.0, fixing eight vulnerabilities in three reference servers: symlink races, trailing quote/whitespace path bypasses and case-insensitive symlink bypasses in filesystem; cross-origin calls over HTTP/SSE in everything; and…
💬 What's your take? Join the discussion in the comments.
Read the original Chinese version
📰 MCP 官方参考服务器 v2.1.0 修复 8 个安全漏洞：filesystem、everything 升至 2.0.1，fetch 升至 2026.10.24
Model Context Protocol 官方 servers 仓库 10 月 25 日（UTC）发布 v2.1.0，修复三个参考服务器中的 8 个漏洞：filesystem 的符号链接竞态、路径尾随引号/空格绕过和大小写符号链接绕过，everything 的 HTTP/SSE 跨源调用，以及 fetch 的…
💬 你怎么看？欢迎在评论区讨论。
#MCP #security #filesystem
0 Comments