Official MCP servers v2.1.0 patches eight vulnerabilities in the filesystem, fetch and everything servers

Sun, Oct 25 08:03 UTC+8Updated Sun, Oct 25 22:15 UTC+8

The modelcontextprotocol/servers project released v2.1.0 with fixes for eight advisories: symlink and path-check gaps in the filesystem server (only partly fixed on Windows), cross-origin access to the everything server's HTTP/SSE transports, and SSRF bypasses in fetch via IDNA host names and NAT64 addresses. Upgrade filesystem and everything to 2.0.1 and mcp-server-fetch to 2026.10.24.

Why it matters

These reference servers are widely wired into AI assistants with local file and network access. Package managers rank 2.0.1 below old date-based versions, so users on those versions must install 2.0.1 explicitly.

Sources3

GitHub · modelcontextprotocol/serversGitHubSun, Oct 25 08:03 UTC+8v2.1.0View original · Sun, Oct 25 08:03 UTC+8
Drop AgenticMediaSun, Oct 25 17:00 UTC+8MCP servers security fix patches eight vulnerabilitiesView original · Sun, Oct 25 17:00 UTC+8
VibehackerMediaSun, Oct 25 22:15 UTC+8Official MCP filesystem, fetch and everything servers patch eight vulnerabilities in v2.1.0View original · Sun, Oct 25 22:15 UTC+8

Written by dalao.ai: the title, summary and why it matters are our own words. The original reports are the record; their publishers keep authorship.