Loading...
Skip to main content
GeekWala

CVE-2026-27735 — mcp-server-git : Path traversal in mcp-server-git...

MEDIUM

mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

Published February 26, 2026Updated July 13, 2026Source: osv

Summary

In `mcp-server-git` versions prior to 2026.1.14, the `git_add` tool did not validate that file paths provided in the files argument were within the repository boundaries. The tool used GitPython's `repo.index.add(`, which did not enforce working-tree boundary checks for relative paths. As a result, relative paths containing `../` sequences that resolved outside the repository were accepted and staged into the Git index, potentially allowing sensitive files to be exfiltrated via subsequent commit and push operations. The fix in PR #3164 switches to `repo.git.add()`, which delegates to the Git CLI and properly rejects out-of-tree paths. Users are advised to upgrade to 2026.1.14 or newer to remediate this issue. mcp-server-git thanks https://hackerone.com/0dd-g for reporting and contributing the fix.

Advisory Timeline

  • First published February 26, 2026 (228 days ago).
  • Last revised July 13, 2026 — 137 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

pip
Update mcp-server-git to 2026.1.14 or later
pip install "mcp-server-git>=2026.1.14"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: pypi (1).

PackageEcosystemAffectedFixed In
mcp-server-git
pypi
0.2.0, 0.3.0, 0.4.0, 0.4.1 (+10 more)2026.1.14

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.3 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
P
Scope
—
Confidentiality
—
Integrity
—
Availability
—

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

References

Frequently Asked Questions

What is CVE-2026-27735?
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries This vulnerability has been assigned a severity rating of MEDIUM (CVSS score: 9.3/10).
How do I check if my project is affected by CVE-2026-27735?
CVE-2026-27735 affects mcp-server-git. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-27735 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
9.3

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-vjqx-cfc4-9h6v
PYSEC-2026-2630

Related CVEs

  • CVE-2025-68143
    CRITICAL

    mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations

  • CVE-2025-68145
    CRITICAL

    mcp-server-git has missing path validation when using --repository flag

  • CVE-2025-68143
    MEDIUM

    mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations

  • CVE-2026-65829
    MEDIUM

    MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

  • CVE-2025-46571
    MEDIUM

    Open WebUI allows limited stored XSS vila uploaded html file

  • CVE-2025-68145
    MEDIUM

    mcp-server-git has missing path validation when using --repository flag

More PyPI advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies