PT-2026-22055 · Unknown · Git-Mcp-Server

0Dd-Gfor · Published 2026-02-25 · Updated 2026-05-07 · CVE-2026-27735

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions mcp-server-git versions prior to 2026.1.14

Description The Model Context Protocol Servers software contains an issue where the git add tool does not properly validate file paths provided in the files argument. This allows relative paths containing ../ sequences that resolve outside the repository boundaries to be accepted and staged into the Git index. This could potentially allow sensitive files to be exfiltrated through subsequent commit and push operations. The tool utilizes GitPython's repo.index.add() which does not enforce working-tree boundary checks. The fix involves switching to repo.git.add(), which delegates to the Git CLI and enforces these checks.

Recommendations Upgrade to mcp-server-git version 2026.1.14 or newer.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-27735

GHSA-VJQX-CFC4-9H6V

Affected Products

Git-Mcp-Server

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27735.json · Exploit
• https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-vjqx-cfc4-9h6v · Vendor Advisory
• https://github.com/modelcontextprotocol/servers/pull/3164 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-27735 · Security Note
• https://osv.dev/vulnerability/GHSA-vjqx-cfc4-9h6v · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-27735 · Vendor Advisory
• https://github.com/modelcontextprotocol/servers/commit/862e717ff714987bd5577318df09858e14883863 · Note
• https://github.com/modelcontextprotocol/servers · Note
• https://twitter.com/CVEnew/status/2027004254792060940 · Twitter Post
• https://twitter.com/_cvereports/status/2027091371908051430 · Twitter Post
• https://twitter.com/ai_security_10x/status/2052474439217144232 · Twitter Post
• https://twitter.com/tau_rho_ai/status/2027071131509784973 · Twitter Post
• https://t.me/CVEtracker/45792 · Telegram Post