Which versions of Git Mcp Server are affected by EUVD-2026-13768?

Organizations using sigmade Git-MCP-Server should be aware of moderate risk from CVE-2026-4496, a OS command injection vulnerability rated CVSS 5.3.. A patch is available.

Is there a public PoC exploit available for EUVD-2026-13768?

Yes, a public proof-of-concept exploit is available for EUVD-2026-13768. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate EUVD-2026-13768?

Within 30 days: Identify affected systems running sigmade Git-MCP-Server and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Git Mcp Server EUVD-2026-13768

Q: What is the CVSS score of EUVD-2026-13768?

EUVD-2026-13768 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

| CVE-2026-4496 LOW

OS Command Injection (CWE-78)

2026-03-20 VulDB

Command Injection Git Mcp Server

1.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

4.8 (MEDIUM) 1.9 (LOW)

CVSS changed

Apr 22, 2026 - 21:37 NVD

5.3 (MEDIUM) 4.8 (MEDIUM)

PoC Detected

Mar 24, 2026 - 15:54 vuln.today

Public exploit code

EUVD ID Assigned

Mar 20, 2026 - 18:46 euvd

EUVD-2026-13768

Analysis Generated

Mar 20, 2026 - 18:46 vuln.today

Patch released

Mar 20, 2026 - 18:46 nvd

Patch available

CVE Published

Mar 20, 2026 - 18:32 nvd

MEDIUM 5.3

DescriptionCVE.org

A vulnerability was found in sigmade Git-MCP-Server up to 785aa159f262a02d5791a5d8a8e13c507ac42880. Affected by this vulnerability is the function child_process.exec of the file src/gitUtils.ts of the component show_merge_diff/quick_merge_summary/show_file_diff. The manipulation results in os command injection. The attack must be initiated from a local position. The exploit has been made public and could be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. It is advisable to implement a patch to correct this issue. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Local command injection in sigmade Git-MCP-Server's merge diff functions allows authenticated local attackers to execute arbitrary OS commands through unsanitized input passed to child_process.exec in src/gitUtils.ts. Public exploit code exists for this vulnerability, increasing the risk of active abuse. A patch is available and should be applied immediately, as the vendor has not responded to early disclosure notifications.

Technical ContextAI

The vulnerability is a classic OS command injection flaw (CWE-78) occurring in the Git-MCP-Server application (cpe:2.3:a:sigmade:git-mcp-server). The root cause lies in the unsafe use of child_process.exec() in Node.js/TypeScript code within src/gitUtils.ts. This function passes user-controlled input directly to the shell without proper sanitization or escaping, allowing attackers to break out of the intended command context and inject arbitrary shell metacharacters and commands. The affected code paths are specifically triggered through the show_merge_diff, quick_merge_summary, and show_file_diff components, suggesting the vulnerability is exposed through Git operations that accept user input for file or merge operations. Child_process.exec() inherently spawns a shell to execute commands, making it particularly dangerous when handling untrusted input compared to safer alternatives like child_process.execFile().

RemediationAI

Apply the available patch from the vendor via the pull request at https://github.com/sigmade/Git-MCP-Server/pull/2. The fix should replace unsafe child_process.exec() calls with child_process.execFile() or equivalent argument-passing mechanisms that do not invoke a shell, combined with strict input validation and sanitization of any Git-related parameters. Until patching is possible, restrict Git-MCP-Server access to trusted local users only, disable the show_merge_diff, quick_merge_summary, and show_file_diff features if not actively required, and monitor process execution logs for suspicious shell command patterns. Consider running Git-MCP-Server in a container or sandbox with minimal host system privileges to limit the impact of successful command injection.