Anthropic Fixes Remote Code Execution Flaws in Git MCP Server

First seen 21 Jan 2026, 06:39 UTC • Theregister

•98% similarity •23

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Anthropic has addressed three vulnerabilities in its Git MCP server, which could be exploited to remotely execute malicious code or overwrite files through prompt injection. The server connects various AI tools to Git repositories, enabling natural language interactions for automation. The security startup Cyata identified the exploit method.

ThreatCluster AI

Attack Flow

11 entities, 20 inferred relationships (STIX 2.1).

Organization (2)

Anthropic
Cyata

Vulnerability (3)

CVE-2025-68143
CVE-2025-68144
CVE-2025-68145

Affected Platform (4)

GitHub
Git MCP Server
Mcp-server-git
Model Context Protocol

Tool (2)

Git
GitPython

Relationships

Git exploits CVE-2025-68143
Git exploits CVE-2025-68144
Git exploits CVE-2025-68145
GitPython exploits CVE-2025-68143
GitPython exploits CVE-2025-68144
GitPython exploits CVE-2025-68145
CVE-2025-68143 targets GitHub
CVE-2025-68143 targets Git MCP Server
CVE-2025-68143 targets Mcp-server-git
CVE-2025-68143 targets Model Context Protocol
CVE-2025-68144 targets GitHub
CVE-2025-68144 targets Git MCP Server
CVE-2025-68144 targets Mcp-server-git
CVE-2025-68144 targets Model Context Protocol
CVE-2025-68145 targets GitHub
CVE-2025-68145 targets Git MCP Server
CVE-2025-68145 targets Mcp-server-git
CVE-2025-68145 targets Model Context Protocol
CVE-2025-68143 related to Anthropic
CVE-2025-68143 related to Cyata

Community

Browse all →

Tracked Entities in This Story

Anthropic Cyata GitHub Git MCP Server Mcp-server-git Model Context Protocol Git GitPython

Anthropic Fixes Remote Code Execution Flaws in Git MCP Server

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story