Modelcontextprotocol Servers vulnerabilities

CVE-2025-68145 [CRITICAL] CWE-22 CVE-2025-68145: In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository fla In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate that repo_path arguments in subsequent tool calls were actually within that configured path. This could allow tool calls to operate on other repositories accessible to the se

CVE-2025-68143 [HIGH] CWE-22 CVE-2025-68143: Model Context Protocol Servers is a collection of reference implementations for the model context pr Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2025.9.25, the git_init tool accepted arbitrary filesystem paths and created Git repositories without validating the target location. Unlike other tools which required an existing repository, git_init cou

CVE-2025-68144 [HIGH] CWE-88 CVE-2025-68144: In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user- In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments directly to git CLI commands without sanitization. Flag-like values (e.g., `--output=/path/to/file` for `git_diff`) would be interpreted as command-line options rather than git refs, enabling arbitrary file overwrites. The fix adds v

CVE-2025-53109 [HIGH] CWE-59 CVE-2025-53109: Model Context Protocol Servers is a collection of reference implementations for the model context pr Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files via symlinks within allowed directories. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.

CVE-2025-53110 [HIGH] CWE-22 CVE-2025-53110: Model Context Protocol Servers is a collection of reference implementations for the model context pr Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). Versions of Filesystem prior to 0.6.4 or 2025.7.01 could allow access to unintended files in cases where the prefix matches an allowed directory. Users are advised to upgrade to 0.6.4 or 2025.7.01 resolve.

CVE-2026-27735 [MEDIUM] CWE-22 CVE-2026-27735: Model Context Protocol Servers is a collection of reference implementations for the model context pr Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in the files argument were within the repository boundaries. Because the tool used GitPython's repo.index.add() rather than the Git