iceener/files-stdio-mcp-server: sandbox escape in fs_search via a symlinked directory (recursive walker validates only the top level)

<p>Posted by Eve on Sep 09</p>Vulnerability report — read-side sandbox escape in iceener/files-stdio-mcp-server<br /> <br /> Project: github.com/iceener/files-stdio-mcp-server (75*). A &quot;MCP Server for interacting with text-based<br /> files&quot; that makes an explicit confinement promise: &quot;Sandboxed filesystem access. Only these paths are<br /> available&quot;, plus a CRITICAL RULES blo