CVE-2025-68143
2 advisories.
PyPI/mcp-server-git CVE-2025-68143: medium, EPSS 8.13%
mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
Action: Upgrade mcp-server-git to 2025.9.25 or later.
pip install mcp-server-git==2025.9.25Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.9.25 | - |
Fixed versions
| 2025.9.25 |
Sources
- osv: GHSA-5cgr-j3jf-jw3v
- https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-5cgr-j3jf-jw3v
- https://nvd.nist.gov/vuln/detail/CVE-2025-68143
- https://github.com/modelcontextprotocol/servers/commit/eac56e7bcde48fb64d5a973924d05d69a7d876e6
- https://github.com/modelcontextprotocol/servers
CVE-2025-68143 · published · modified · JSON
PyPI/mcp-server-git CVE-2025-68143: unknown, EPSS 8.13%
mcp-server-git's unrestricted git_init tool allows repository creation at arbitrary filesystem locations
Action: Upgrade mcp-server-git to 2025.9.25 or later.
pip install mcp-server-git==2025.9.25Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.9.25 | - |
Fixed versions
| 2025.9.25 |
Sources
- osv: PYSEC-2026-1621
- https://github.com/modelcontextprotocol/servers/security/advisories/GHSA-5cgr-j3jf-jw3v
- https://nvd.nist.gov/vuln/detail/CVE-2025-68143
- https://github.com/modelcontextprotocol/servers/commit/eac56e7bcde48fb64d5a973924d05d69a7d876e6
- https://github.com/modelcontextprotocol/servers
- https://pypi.org/project/mcp-server-git
- https://github.com/advisories/GHSA-5cgr-j3jf-jw3v
CVE-2025-68143 · published · modified · JSON