MCP reference servers vulnerabilities and CVEs
The Beam CVE database tracks 6 security advisories for MCP reference servers: 2 high and 4 medium severity. The newest is CVE-2026-27735, published Feb 26, 2026 and fixed in 2026.1.14.
The reference MCP servers maintained by the MCP project, such as the filesystem, git and fetch servers.
Check your version: npm ls @modelcontextprotocol/server-filesystem or npm ls @modelcontextprotocol/server-memory or npm ls @modelcontextprotocol/server-everything or pip show mcp-server-git or pip show mcp-server-fetch or pip show mcp-server-time
- Vulnerabilities tracked
- 6
- Critical
- 0
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-27735
mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries
medium6.4Feb 26, 2026CVE-2025-68143
mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
medium6.5Dec 17, 2025CVE-2025-68144
mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
medium6.3Dec 17, 2025CVE-2025-68145
mcp-server-git has missing path validation when using --repository flag
medium6.4Dec 17, 2025CVE-2025-53109
@modelcontextprotocol/server-filesystem allows for path validation bypass via prefix matching and symlink handling
high7.3No fixJul 1, 2025CVE-2025-53110
@modelcontextprotocol/server-filesystem vulnerability allows for path validation bypass via colliding path prefix
high7.3No fixJul 1, 2025