PT-2025-51937 · Unknown · Git-Mcp-Server

Yardenporat · Published 2025-12-17 · Updated 2026-02-23 · CVE-2025-68144

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions mcp-server-git versions prior to 2025.12.17

Description The git diff and git checkout functions in mcp-server-git did not properly sanitize user-supplied arguments before passing them to git CLI commands. Specifically, flag-like values, such as --output=/path/to/file used with git diff, were treated as command-line options instead of git references, potentially allowing arbitrary file overwrites. The fix introduces validation to reject arguments beginning with '-' and verifies that arguments resolve to valid git references using rev parse before execution.

Recommendations Update to version 2025.12.17 to resolve this issue.

Exploit

Fix

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

CVE-2025-68144

GHSA-9XWC-HFWC-8W59

Affected Products

Git-Mcp-Server

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68144.json · Exploit
• https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-9xwc-hfwc-8w59 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68144 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68144 · Security Note
• https://twitter.com/karbonmade/status/2026074164583620842 · Twitter Post
• https://twitter.com/socradar/status/2013956495046857087 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2001616145535610921 · Twitter Post
• https://t.me/true_secator/7824 · Telegram Post
• https://twitter.com/CVEnew/status/2002487807609376948 · Twitter Post
• https://t.me/CVEtracker/40097 · Telegram Post
• https://twitter.com/grok/status/2018271298598683033 · Twitter Post
• https://twitter.com/0xsailon/status/2024409271484764268 · Twitter Post
• https://twitter.com/ox0ffff/status/2013859783200124950 · Twitter Post