Anthropic MCP Git Server Triple Flaw (CVE-2025-68143, -68144, -68145)
Date: 2025-06
Affected: Anthropic MCP Git Server Triple Flaw (CVE-2025-68143, -68144, -68145)
Attack vector: rce
Category: real-world
Severity: High
CVE: CVE-2025-68143
CVE-2025-68144
CVE-2025-68145
CWE: CWE-22
CVSS:  (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Path validation bypass, unrestricted git_init (CVSS 8.8), and argument injection in git_diff. Chained with Filesystem MCP, achieved RCE via Git smudge/clean filters. Exploitable via prompt injection through malicious README files or issue descriptions. Reported June 2025, patched December 2025, disclosed January 2026.


Mitigations:

Architectural layers (MAESTRO):