Anthropic Git MCP Server Vulnerabilities Involving Path Traversal and Argument Injection

Anthropic's reference mcp-server-git implementation contained three disclosed vulnerabilities (two path traversal flaws and one argument-injection issue) that researchers demonstrated can be abused via prompt injection to read or delete arbitrary files and, when combined with file-writing capabilities, achieve remote code execution; Anthropic patched the issues (removing a vulnerable tool and adding stricter path validation) and users should upgrade versions prior to 2025.12.18.