PYSEC-2026-2630: mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
PYSEC-2026-2630 · CVE-2026-27735 · GHSA-vjqx-cfc4-9h6v
- Advisory ID
- DURIN-MCP-2026-000020
- Severity
- unknown
- Publication state
- published
- Updated
Summary
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
This is a public advisory summary. Its publication state does not establish whether a particular deployed connection is affected or has been remediated.
Complete the browser check below for affected versions, remediation, revision history and attributed assessment evidence.