mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in the files argument were within the repository boundaries. The tool used GitPython's repo.index.add(, which did not enforce working-tree boundary checks for relative paths. As a result, relative paths containing ../ sequences that resolved outside the repository were accepted and staged into the Git index, potentially allowing sensitive files to be exfiltrated via subsequent commit and push operations. The fix in PR #3164 switches to repo.git.add(), which delegates to the Git CLI and properly rejects out-of-tree paths. Users are advised to upgrade to 2026.1.14 or newer to remediate this issue.
mcp-server-git thanks https://hackerone.com/0dd-g for reporting and contributing the fix.
Software afectado
Haz clic en una tecnología para ver todas sus vulnerabilidades.
| Plataforma | Paquete | Versiones vulnerables | Corregida en |
|---|---|---|---|
| Python (PyPI) | mcp-server-git | < 2026.1.14 | 2026.1.14 |
Referencias
- https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-vjqx-cfc4-9h6v
- https://nvd.nist.gov/vuln/detail/CVE-2026-27735
- https://github.com/modelcontextprotocol/servers/pull/3164
- https://github.com/modelcontextprotocol/servers/commit/862e717ff714987bd5577318df09858e14883863
- https://github.com/modelcontextprotocol/servers
- https://pypi.org/project/mcp-server-git
- https://github.com/advisories/GHSA-vjqx-cfc4-9h6v
- Vector CVSS
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N- Debilidad (CWE)
CWE-22- Plataforma
- Python (PyPI)
- Paquete
mcp-server-git- Publicada
- 26.02.2026
- Actualizado
- 11.10.2026 14:17
Fuentes y licencias
OSV / GitHub Advisory Database - PYSEC-2026-2630 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-vjqx-cfc4-9h6v - CC BY 4.0
Historial de vulnerabilidades: mcp-server-git
Todas las vulnerabilidades publicadas de este paquete (Python (PyPI)), de la más reciente a la más antigua. Muestra si es un fallo aislado o un paquete que hay que vigilar.
- Entradas en total
- 4
- Primera → última
- 12.2025 02.2026
- Sin corrección
- 0
- Explotada en ataques
- 0
Distribución por gravedad
- Media 4
Divulgaciones por año
- 2025: 3
- 2026: 1
-
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries esta entrada
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.