MEDIUM6.5
GHSA-22v8-p7h2-rj7p
Markdownify MCP Server allows attackers to read arbitrary files
Details
All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/mcp-markdownify-server
Introduced in:
0No fixed version published yet for mcp-markdownify-server (npm). Pin to a known-safe version or switch to an alternative.
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-5273[ADVISORY]
- https://github.com/zcaceres/markdownify-mcp/commit/3a6b202d088ef7acb8be84bc09515f41a2b1a9df[WEB]
- https://github.com/zcaceres/markdownify-mcp[PACKAGE]
- https://github.com/zcaceres/markdownify-mcp/blob/3667bd4765c0e49684ce22df268d02dd478a7f3b/src/Markdownify.ts#L94[WEB]
- https://security.snyk.io/vuln/SNYK-JS-MCPMARKDOWNIFYSERVER-10249193[WEB]