PYSEC-2026-1621: mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
PYSEC-2026-1621 · CVE-2025-68143 · GHSA-5cgr-j3jf-jw3v
- Advisory ID
- DURIN-MCP-2026-000017
- Severity
- unknown
- Publication state
- published
- Updated
Summary
mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
This is a public advisory summary. Its publication state does not establish whether a particular deployed connection is affected or has been remediated.
Complete the browser check below for affected versions, remediation, revision history and attributed assessment evidence.