oss-security·17d agoSurvey of filesystem MCP servers: how the "sandboxed filesystem" boundary is enforced (one breach, four defended-by-design)#ai-agents#filesystem#mcpVulnerability1