AI agent vulnerability · MCP reference servers

CVE-2026-27735: mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

mediumCVSS 4.0 6.4GHSA-vjqx-cfc4-9h6v

In mcp-server-git versions prior to 2026.1.14, the gitadd tool did not validate that file paths provided in the files argument were within the repository boundaries. The tool used GitPython's repo.index.add(, which did not enforce working-tree boundary checks for relative paths.

Published Feb 26, 2026

Affected packages

mcp-server-git

Ecosystem: PyPI
Affected: < 2026.1.14
Fixed in: 2026.1.14
Check: pip show mcp-server-git

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in the files argument were within the repository boundaries. The tool used GitPython's repo.index.add(, which did not enforce working-tree boundary checks for relative paths. As a result, relative paths containing ../ sequences that resolved outside the repository were accepted and staged into the Git index, potentially allowing sensitive files to be exfiltrated via subsequent commit and push operations. The fix in PR #3164 switches to repo.git.add(), which delegates to the Git CLI and properly rejects out-of-tree paths. Users are advised to upgrade to 2026.1.14 or newer to remediate this issue.

mcp-server-git thanks https://hackerone.com/0dd-g for reporting and contributing the fix.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More MCP reference servers vulnerabilities

All MCP reference servers entries