Security: filesystem server path parameters lack traversal constraints enabling prompt injection → arbitrary file read/write

Security: filesystem server path parameters lack traversal constraints enabling prompt injection → arbitrary file read/write #3798