GHSA-9xwc-hfwc-8w59: mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
GHSA-9xwc-hfwc-8w59 · CVE-2025-68144 · PYSEC-2026-1622
- Advisory ID
- DURIN-MCP-2026-000014
- Severity
- medium
- Publication state
- published
- Updated
Summary
mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
This is a public advisory summary. Its publication state does not establish whether a particular deployed connection is affected or has been remediated.
Complete the browser check below for affected versions, remediation, revision history and attributed assessment evidence.