Model Context Protocol Servers vulnerabilities

3 known vulnerabilities in Model Context Protocol Servers from Lfprojects. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  servers: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-68145Dec 17, 2025ModelcontextprotocolEPSS 7.03%

  In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate that repo_path arguments in subsequent tool calls were actually within that configur

• 7.1 High severity

  servers: Improper Neutralization of Argument Delimiters in a Command

  CVE-2025-68144Dec 17, 2025ModelcontextprotocolEPSS 7.21%

  In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments directly to git CLI commands without sanitization. Flag-like values (e.g., `--output=/path/to/file` for `git_diff`) would be interpreted as

• 8.8 High severity

  servers: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-68143Dec 17, 2025ModelcontextprotocolEPSS 8.13%

  Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2025.9.25, the git_init tool accepted arbitrary filesystem paths and created Git repositories without validati