CVE-2025-61685: Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure
Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent path traversal for reading file contents, but this check is effectively bypassed by subsequent logic that attempts to find directory suggestions. An attacker can leverage this flaw to list the contents of arbitrary directories on the user's filesystem, including the user's home directory, exposing sensitive information about the file system's structure. This issue is fixed in version 0.13.20.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61685?
CVE-2025-61685 has a high severity due to its potential for disclosing sensitive directory listings.
How do I fix CVE-2025-61685?
To fix CVE-2025-61685, update the Mastra framework to a version later than 0.13.20-alpha.0.
What software is affected by CVE-2025-61685?
CVE-2025-61685 affects Mastra versions 0.13.8 through 0.13.20-alpha.0.
What type of attack is described in CVE-2025-61685?
CVE-2025-61685 describes a Directory Traversal attack that exposes directory listings.
What is the main consequence of the vulnerability CVE-2025-61685?
The main consequence of CVE-2025-61685 is the unauthorized disclosure of directory contents.