CVE-2026-25710

Name of the Vulnerable Software and Affected Versions Anthropic Git MCP server (affected versions not specified)

Description The Anthropic Git MCP server contains an argument injection flaw that allows for Remote Code Execution (RCE). The issue was identified in Anthropic’s own implementation of the Git MCP server. The potential impact extends to numerous community-run MCP servers that may lack security audits. The flaw allows an attacker to inject arguments, potentially leading to the execution of arbitrary code on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.