mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in the files argument were within the repository boundaries. The tool used GitPython's repo.index.add(, which did not enforce working-tree boundary checks for relative paths. As a result, relative paths containing ../ sequences that resolved outside the repository were accepted and staged into the Git index, potentially allowing sensitive files to be exfiltrated via subsequent commit and push operations. The fix in PR #3164 switches to repo.git.add(), which delegates to the Git CLI and properly rejects out-of-tree paths. Users are advised to upgrade to 2026.1.14 or newer to remediate this issue.
mcp-server-git thanks https://hackerone.com/0dd-g for reporting and contributing the fix.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| Python (PyPI) | mcp-server-git | < 2026.1.14 | 2026.1.14 |
References
- https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-vjqx-cfc4-9h6v
- https://nvd.nist.gov/vuln/detail/CVE-2026-27735
- https://github.com/modelcontextprotocol/servers/pull/3164
- https://github.com/modelcontextprotocol/servers/commit/862e717ff714987bd5577318df09858e14883863
- https://github.com/modelcontextprotocol/servers
- https://pypi.org/project/mcp-server-git
- https://github.com/advisories/GHSA-vjqx-cfc4-9h6v
- CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N- Weakness (CWE)
CWE-22- Platform
- Python (PyPI)
- Package
mcp-server-git- Disclosed
- 26.02.2026
- Updated
- 11.10.2026 14:17
Sources and licenses
OSV / GitHub Advisory Database - PYSEC-2026-2630 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-vjqx-cfc4-9h6v - CC BY 4.0
Vulnerability history: mcp-server-git
All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 4
- First → latest
- 12.2025 02.2026
- Without a fix
- 0
- Exploited in attacks
- 0
Severity breakdown
- Medium 4
Disclosures per year
- 2025: 3
- 2026: 1
-
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.