MCPA-2025-0006
highrce-vectors
@cyanheads/git-mcp-server command injection in several git tools (CVE-2025-53107)
git-mcp-server versions through 2.1.4 pass unsanitized tool input (e.g. branch names, file arguments) into `child_process.exec`, allowing shell metacharacter injection in tools such as `git_init` and `git_add`. Indirect prompt injection via crafted git commit messages can chain into arbitrary command execution on the host running the server.
Affected packages
| Ecosystem | Package | Affected versions |
|---|---|---|
| npm | @cyanheads/git-mcp-server | >= 0, < 2.1.5 |
Identifiers
CVE-2025-53107GHSA-3q26-f695-pp76CWE-78
References
- advisory https://github.com/advisories/GHSA-3q26-f695-pp76
- advisory https://nvd.nist.gov/vuln/detail/CVE-2025-53107
- fix https://github.com/cyanheads/git-mcp-server/releases
Timeline
- Published: 2025-06-29