CVE-2025-68143Medium▾ Sunlitmcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27.5 · likelihood 1.6 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
7.8%
7.8% → 8.3%
In mcp-server-git versions prior to 2025.9.25, the git_init tool accepted arbitrary filesystem paths and created Git repositories without validating the target location. Unlike other tools which required an existing repository, git_init could operate on any directory accessible to the server process, making those directories eligible for subsequent git operations. The tool was removed entirely, as the server is intended to operate on existing repositories only. Users are advised to upgrade to 2025.9.25 or newer to remediate this issue.
Thank you to https://hackerone.com/yardenporat for disclosure, @0dd for contributing the fix.
mcp-server-git < 2025.9.25Upgrade to a patched release:
mcp-server-git 2025.9.25Connected by shared product, vendor, weakness, or advisory.
CVE-2026-27735Mediummcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
CVE-2025-68145Mediummcp-server-git has missing path validation when using --repository flag
CVE-2025-68144Mediummcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files