CVE-2025-68144

CVE-2025-68144 is a medium-severity vulnerability affecting mcp-server-git versions prior to 2025.12.17, specifically impacting the git_diff and git_checkout functions. This flaw allows attackers to overwrite arbitrary files due to unsanitized user-controlled arguments being passed directly to git CLI commands, where flag-like values are misinterpreted as command-line options. The attack vector is network-based with low attack complexity, and while the CVSS score indicates no direct impact on confidentiality or integrity, the ability to overwrite files presents a significant risk. There is no evidence of active exploitation, nor is public exploit code available, but the vulnerability has garnered significant community discussion and media coverage, indicating high awareness.