--- title: Three Flaws in Anthropic MCP Git Server Enable File... description: Three security vulnerabilities were discovered in Anthropic's mcp-server-git, an official Model Context Protocol server for Git operations. The flaws include... canonical: https://daily.dev/posts/three-flaws-in-anthropic-mcp-git-server-enable-file-access-and-code-execution-rcps0ejf4 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution | daily.dev og:description: Three security vulnerabilities were discovered in Anthropic's mcp-server-git, an official Model Context Protocol server for Git operations. The flaws include... og:url: https://daily.dev/posts/three-flaws-in-anthropic-mcp-git-server-enable-file-access-and-code-execution-rcps0ejf4 og:image: https://api.daily.dev/og/posts/rCPS0EJF4.png og:image:alt: Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution **[The Hacker News](https://daily.dev/sources/thn)** · 3 min read · 0 upvotes · 0 comments ## Summary Three security vulnerabilities were discovered in Anthropic's mcp-server-git, an official Model Context Protocol server for Git operations. The flaws include path traversal and argument injection issues that can be exploited through prompt injection attacks, allowing attackers to read or delete arbitrary files and potentially execute remote code. The vulnerabilities (CVE-2025-68143, CVE-2025-68144, CVE-2025-68145) have been patched in versions 2025.9.25 and 2025.12.18. Attackers could chain these vulnerabilities with the Filesystem MCP server to write malicious Git configuration files and achieve code execution without direct system access. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#python](https://daily.dev/tags/python), [#llm](https://daily.dev/tags/llm), [#git](https://daily.dev/tags/git), [#anthropic](https://daily.dev/tags/anthropic) [View this post on daily.dev](https://daily.dev/posts/three-flaws-in-anthropic-mcp-git-server-enable-file-access-and-code-execution-rcps0ejf4) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution","url":"https://daily.dev/posts/three-flaws-in-anthropic-mcp-git-server-enable-file-access-and-code-execution-rcps0ejf4","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/three-flaws-in-anthropic-mcp-git-server-enable-file-access-and-code-execution-rcps0ejf4"},"datePublished":"2026-01-20T18:48:53.293Z","dateModified":"2026-08-24T07:08:33.637Z","description":"Three security vulnerabilities were discovered in Anthropic's mcp-server-git, an official Model Context Protocol server for Git operations. The flaws include...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/67e4ad909f44d6195e0005f8f96bcb10?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/67e4ad909f44d6195e0005f8f96bcb10?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"The Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/thn","url":"https://daily.dev/sources/thn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/three-flaws-in-anthropic-mcp-git-server-enable-file-access-and-code-execution-rcps0ejf4","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,python,llm,git,anthropic","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Hacker News","item":"https://daily.dev/sources/thn"},{"@type":"ListItem","position":3,"name":"Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution"}]} ```