- Description
- In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate that repo_path arguments in subsequent tool calls were actually within that configured path. This could allow tool calls to operate on other repositories accessible to the server process. The fix adds path validation that resolves both the configured repository and the requested path (following symlinks) and verifies the requested path is within the allowed repository before executing any git operations. Users are advised to upgrade to 2025.12.17 upon release to remediate this issue.
- Source
- security-advisories@github.com
- NVD status
- Analyzed
- Products
- model_context_protocol_servers
CVSS 4.0
- Type
- Secondary
- Base score
- 6.4
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- MEDIUM
CVSS 3.1
- Type
- Primary
- Base score
- 9.1
- Impact score
- 5.2
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- Severity
- CRITICAL
- security-advisories@github.com
- CWE-22
- Hype score
- Not currently trending
Anthropic's own mcp-server-git had 3 chained vulns: path validation bypass, unrestricted git_init (.ssh → git repo), git_diff argument injection. Combined = full RCE. The reference implementation devs copy is broken. CVE-2025-68145 #MCP #AISecurity
@abcas_mcp_guard
16 Mar 2026
4 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-68145。公式Git MCPでもpath traversal。公式かどうかより、接続後に返る内容を監視できるかのほうが大事。
@natalie_avfieb
11 Mar 2026
18 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-68145 in Anthropic’s Git MCP server is a useful reminder: official isn’t a security boundary. Path scope, tool permissions, and runtime output matter more than the logo on the repo.
@natalie_avfieb
11 Mar 2026
11 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
MCP 生态的安全问题正在浮出水面，每个用 AI 编码工具的开发者都该关注。 Anthropic 自家的 Git MCP Server 被发现 3 个 CVE 漏洞（CVE-2025-68143、CVE-2025-68144、CVE-2025-68145），攻击者可以通过 prompt injection
@DevJohnWayne
23 Feb 2026
39 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
📝 New article: Critical Path Traversal in mcp-server-git: CVE-2025-68145 Analysis and Defense https://t.co/ypmcGpywQL
@ai_security_10x
16 Feb 2026
1 Impression
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Anthropic의 공식 MCP Git 서버에서 임의 파일 접근 및 코드 실행을 가능하게 하는 3가지 보안 취약점(CVE-2025-68143, CVE-2025-68144, CVE-2025-68145)이 발견되었습니다. 프롬프트 인젝션을 통한 공격 가능성이 확인되었습니다. h
@webi_kr
21 Jan 2026
34 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-68145 In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not… https://t.co/HMRgwz79LL
@CVEnew
20 Dec 2025
144 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:lfprojects:model_context_protocol_servers:*:*:*:*:*:*:*:*",
"matchCriteriaId": "886A96BE-326B-4E6D-A4A6-12F18772BD14",
"versionEndExcluding": "2025.12.18",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]