CVE-2026-85626: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in cyanheads git-mcp-server
Description
git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, git_diff, and git_show tools that lack leading-dash validation. Attackers can inject git command-line options like --output= to write files outside the repository to arbitrary paths accessible by the process.
CVSS v4.0
Score 8.7high
Affected software
cyanheads
git-mcp-server
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85626 is an argument injection vulnerability in cyanheads git-mcp-server affecting versions up to 2.15.3. The issue arises because the ref and object parameters in git_log, git_diff, and git_show do not validate leading dashes, allowing injection of git command-line options such as --output=. This can be exploited by attackers to write files outside the intended repository directory to arbitrary filesystem locations accessible by the running process.
Potential Impact
Successful exploitation can lead to unauthorized file writes outside the repository, potentially allowing attackers to overwrite or create files in arbitrary locations accessible by the git-mcp-server process. This can lead to data integrity issues or further compromise depending on the file paths targeted.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid exposing vulnerable git-mcp-server versions to untrusted inputs or networks. Monitor vendor channels for updates and apply patches promptly once released.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-04T11:03:33.316Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9adb43acd9273b49bef544
Added to database: 09/04/2026, 14:52:51 UTC
Last enriched: 10/02/2026, 15:44:28 UTC
Last updated: 10/17/2026, 18:48:23 UTC
Views: 72
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.