PT-2026-23710 · Anthropic · Anthropic Git Mcp Server

Matthias Gerstner · Published 2026-03-06 · Updated 2026-05-13 · CVE-2026-25710

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Anthropic Git MCP server (affected versions not specified)

Description The Anthropic Git MCP server contains an argument injection flaw that allows for Remote Code Execution (RCE). The issue was identified in Anthropic’s own implementation of the Git MCP server. The potential impact extends to numerous community-run MCP servers that may lack security audits. The flaw allows an attacker to inject arguments, potentially leading to the execution of arbitrary code on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

LPE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2026-25710

Affected Products

Anthropic Git Mcp Server

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2026-25710 · Security Note
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-25710 · Note
• https://twitter.com/FOSSForce/status/2049534205508366445 · Twitter Post
• https://twitter.com/Absolcasso/status/2030097976161620193 · Twitter Post
• https://twitter.com/Absolcasso/status/2030082735872840142 · Twitter Post
• https://twitter.com/oss_security/status/2048949186289123489 · Twitter Post
• https://twitter.com/Absolcasso/status/2030113165728788894 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2054647842220761099 · Twitter Post
• https://twitter.com/Absolcasso/status/2029889014724214836 · Twitter Post
• https://t.me/CVEtracker/53641 · Telegram Post
• http://openwall.com/lists/oss-security/2026/04/27/1 · Note
• https://security.opensuse.org/2026/04/27/plasma-login-manager.html#6-upstream-bugfix · Note