2026-01-20 · 2026-Q1
Anthropic Git MCP Server Vulnerability Chain
PrimaryL5Config
- Fixable:
- Yes, vendor patch
- Vendor response:
- Patched
- In the wild:
- No
- Actor:
- Attacker
Target
Anthropic Git MCP Server
Impact
Path traversal, argument injection, and RCE when chained; any directory turned into Git repo; arbitrary file overwrite
Root Cause
Missing path validation, unsanitized arguments in git_diff/git_checkout