MCP Servers v2.1.0 released, fixing eight vulnerabilities in three servers

MCP Servers v2.1.0 fixes eight vulnerabilities in three servers. Users must upgrade @modelcontextprotocol/server-filesystem and @modelcontextprotocol/server-everything to 2.0.1, and mcp-server-fetch to 2026.10.24. Affected versions include @modelcontextprotocol/server-filesystem 1.0.0 through 2.0.0 and date versions through 2026.8.31; @modelcontextprotocol/server-everything 1.0.0 through 2.0.0 and date versions 2025.9.24 through 2026.8.31; and mcp-server-fetch through 2026.10.19.

In @modelcontextprotocol/server-filesystem, writes now stay inside the checked directory on Linux and macOS. This fixes an issue where a parent directory swapped for a symlink between the access check and the write could redirect write_file, edit_file, create_directory, or move_file destinations outside allowed directories. On Windows, this is only partially fixed, and the advisory (GHSA-53mr-w429-c597) describes what remains exposed and how to configure around it. Paths are now checked exactly as they are used; the access check no longer strips a trailing quote or whitespace, preventing access to sibling directories named after allowed ones with those suffixes (GHSA-7rgq-gccq-qphx). Additionally, a regression from 2026.8 was fixed where a symlink spelled in a different letter case would pass the symlink check on case-insensitive volumes like macOS's default.