6.4

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-27735

CVE-2026-27735: mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2026.1.14, the git_add tool did not validate that file paths provided in the files argument were within the repository boundaries. Because the tool used GitPython's repo.index.add() rather than the Git CLI, relative paths containing ../ sequences that resolve outside the repository were accepted and staged into the Git index. Users are advised to upgrade to 2026.1.14 or newer to remediate this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-27735

CVE-2026-27735:

6.4

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
mcp-server-git	pip	< 2026.1.14	2026.1.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the git_add function of the mcp-server-git package. The function's use of repo.index.add() from the GitPython library was insecure because it didn't prevent path traversal. An attacker could craft a request with file paths like ../../../../etc/passwd to add sensitive system files to the Git staging area. The patch, identified in commit 862e717ff714987bd5577318df09858e14883863, replaces the vulnerable call with repo.git.add("--", *files). This new implementation delegates the operation to the Git command-line interface, which correctly enforces repository boundaries and prevents the staging of files outside the working tree. The identified vulnerable function, mcp_server_git.server.git_add, is the exact location of this flawed logic and would be the function observed in a runtime profile during exploitation of this vulnerability.

Vulnerable functions

mcp_server_git.server.git_add

src/git/src/mcp_server_git/server.py

The `git_add` function in `mcp_server_git/server.py` was vulnerable to a path traversal attack. It used `repo.index.add(files)`, which did not properly sanitize or validate the input file paths. This allowed an attacker to provide relative paths with `../` sequences to access and stage files outside of the intended Git repository. These staged files could then be committed and pushed to a remote repository, leading to information disclosure.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.