A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerability is caused by flawed logic in the is_dangerous_path() validation function that uses exact string matching against a blacklist of system directories. Attackers can bypass these restrictions by accessing subdirectories of blacklisted paths.
References
| Link | Resource |
|---|---|
| https://github.com/BeehiveInnovations/zen-mcp-server/issues/293 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/Team-Off-course/MCP-Server-Vuln-Analysis/blob/main/CVE-2025-66689.md | Exploit Third Party Advisory |
Configurations
History
22 Jan 2026, 21:57
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:busymac:pal_mcp_server:*:*:*:*:*:*:*:* | |
| References | () https://github.com/BeehiveInnovations/zen-mcp-server/issues/293 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://github.com/Team-Off-course/MCP-Server-Vuln-Analysis/blob/main/CVE-2025-66689.md - Exploit, Third Party Advisory | |
| First Time |
Busymac pal Mcp Server
Busymac |
12 Jan 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-22 CWE-552 |
12 Jan 2026, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-12 17:15
Updated : 2026-01-22 21:57
NVD link : CVE-2025-66689
Mitre link : CVE-2025-66689
CVE.ORG link : CVE-2025-66689
JSON object : View
Products Affected
busymac
- pal_mcp_server