{"data":{"id":"f84b0c4e-567a-493f-bd07-e1f667c33950","title":"CVE-2025-53107: @cyanheads/git-mcp-server is an MCP server designed to interact with Git repositories. Prior to version 2.1.5, there is…","summary":"@cyanheads/git-mcp-server, an MCP server for Git repositories, prior to version 2.1.5 has a command injection flaw. Unsanitized input parameters are passed into a child_process.exec call, so an attacker can inject shell metacharacters such as |, >, and && to run arbitrary system commands with the server process's privileges, potentially leading to remote code execution. An MCP client can also be steered into this through indirect prompt injection when asked to read git logs.","solution":"This issue has been patched in version 2.1.5.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-53107","publishedAt":"2025-07-01T18:15:25.990Z","cveId":"CVE-2025-53107","cweIds":["CWE-77"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["@cyanheads/git-mcp-server@<= 2.1.4 (fixed: 2.1.5)"],"affectedPackageNames":["@cyanheads/git-mcp-server"],"affectedPackageRefs":["npm:@cyanheads/git-mcp-server"],"affectedVendors":[],"affectedVendorsRaw":["@cyanheads/git-mcp-server","MCP server"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"@cyanheads/git-mcp-server command injection via unsanitized input","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.24536,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":["GHSA-3q26-f695-pp76"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:53:30.552Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-06-29T11:45:51.742Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:44:17.737Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[{"ecosystem":"npm","name":"@cyanheads/git-mcp-server","fixedVersion":"2.1.5","matchedVersion":"2.1.5","fixReleasedAt":"2025-06-29T11:45:51.742Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:44:17.587Z"}]}}