CVE-2025-68145: mcp-server-git has missing path validation when using --repository flag
In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate that repopath arguments in subsequent tool calls were actually within that configured path. This could allow tool calls to operate on other repositories accessible to the server process. The fix adds path validation that resolves both the configured repository and the requested path (following symlinks) and verifies the requested path is within the allowed repository before executing any git operations. Users are advised to upgrade to 2025.12.17 upon release to remediate this issue.
Other sources
In mcp-server-git versions prior to 2025.12.18, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate that repopath arguments in subsequent tool calls were actually within that configured path. This could allow tool calls to operate on other repositories accessible to the server process. The fix adds path validation that resolves both the configured repository and the requested path (following symlinks) and verifies the requested path is within the allowed repository before executing any git operations. Users are advised to upgrade to 2025.12.18 to remediate this issue.
Thank you to https://hackerone.com/yardenporat for reporting.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68145?
CVE-2025-68145 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-68145?
To fix CVE-2025-68145, update mcp-server-git to version 2025.12.17 or later.
What versions are affected by CVE-2025-68145?
CVE-2025-68145 affects mcp-server-git versions prior to 2025.12.17 and up to 2025.11.25.
What type of vulnerability is CVE-2025-68145?
CVE-2025-68145 is a path traversal vulnerability in mcp-server-git when improperly configured.
What happens if CVE-2025-68145 is exploited?
If exploited, CVE-2025-68145 could allow unauthorized access to files outside the specified repository path.