Git Mcp Server
Monthly
Argument injection in git-mcp-server 2.15.1 allows unauthenticated remote attackers to write arbitrary files outside the target repository to any filesystem path reachable by the server process. The `ref` and `object` parameters passed to the `git_log`, `git_diff`, and `git_show` tool handlers lack leading-dash validation, permitting injection of git command-line options such as `--output=` directly into the underlying CLI invocation. No public exploit code has been identified at time of analysis, and a corrective release (v2.15.3) is available with fixes in the command-builder and log operation modules.
Local command injection in sigmade Git-MCP-Server's merge diff functions allows authenticated local attackers to execute arbitrary OS commands through unsanitized input passed to child_process.exec in src/gitUtils.ts. Public exploit code exists for this vulnerability, increasing the risk of active abuse. A patch is available and should be applied immediately, as the vendor has not responded to early disclosure notifications.
Argument injection in git-mcp-server 2.15.1 allows unauthenticated remote attackers to write arbitrary files outside the target repository to any filesystem path reachable by the server process. The `ref` and `object` parameters passed to the `git_log`, `git_diff`, and `git_show` tool handlers lack leading-dash validation, permitting injection of git command-line options such as `--output=` directly into the underlying CLI invocation. No public exploit code has been identified at time of analysis, and a corrective release (v2.15.3) is available with fixes in the command-builder and log operation modules.
Local command injection in sigmade Git-MCP-Server's merge diff functions allows authenticated local attackers to execute arbitrary OS commands through unsanitized input passed to child_process.exec in src/gitUtils.ts. Public exploit code exists for this vulnerability, increasing the risk of active abuse. A patch is available and should be applied immediately, as the vendor has not responded to early disclosure notifications.