CVE-2025-68143: falha de média gravidade em modelcontextprotocol servers
mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 8.1%
Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2025.9.25, the git_init tool accepted arbitrary filesystem paths and created Git repositories without validating the target location. Unlike other tools which required an existing repository, git_init could operate on any directory accessible to the server process, making those directories eligible for subsequent git operations. The tool was removed entirely, as the server is intended to operate on existing repositories only. Users are advised to upgrade to 2025.9.25 or newer to remediate this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
Produtos afetados
modelcontextprotocol · serversCVEs relacionadas — modelcontextprotocol servers
No mesmo produto, das mais perigosas para as menos.
CVE-2025-68144MEDIUMmcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local filesEPSS 7.2%CVE-2025-68145MEDIUMmcp-server-git has missing path validation when using --repository flagEPSS 7.0%CVE-2025-53109HIGHModel Context Protocol Servers Vulnerable to Path Validation Bypass via Prefix Matching and Symlink HandlingEPSS 0.8%CVE-2025-53110HIGHModel Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path PrefixEPSS 0.6%CVE-2026-27735MEDIUMmcp-server-git : Path traversal in git_add allows staging files outside repository boundariesEPSS 0.3%