CVE-2025-68144
Description
In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments directly to git CLI commands without sanitization. Flag-like values (e.g., `--output=/path/to/file` for `git_diff`) would be interpreted as command-line options rather than git refs, enabling arbitrary file overwrites. The fix adds validation that rejects arguments starting with - and verifies the argument resolves to a valid git ref via rev_parse before execution. Users are advised to update to 2025.12.17 resolve this issue when it is released.
How to fix
- mcp-server-git2025.12.18 or later
- lfprojects model_context_protocol_servers2025.12.17 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mcp-server-gitPyPI | v < 2025.12.18 | 2025.12.18 |
| lfprojects model_context_protocol_servers | v < 2025.12.17 | 2025.12.17 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.