GHSA-vjqx-cfc4-9h6v: mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
GHSA-vjqx-cfc4-9h6v · CVE-2026-27735 · PYSEC-2026-2630
- Advisory ID
- DURIN-MCP-2026-000016
- Severity
- medium
- Publication state
- published
- Updated
Summary
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
This is a public advisory summary. Its publication state does not establish whether a particular deployed connection is affected or has been remediated.
Complete the browser check below for affected versions, remediation, revision history and attributed assessment evidence.