PT-2026-122138

CVE-2026-106764

Published

2026-10-23

Updated

2026-10-23

CVSS 3.1

7.5

High

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾