Evidence · DiggingBeagle record
Previous Git MCP repository confinement patch bypassed by external alternates and linked-worktree identity confusion
New source supporting a material update to the existing DiggingBeagle research unit CASE-2026-DB233-MCP-GIT-ALTERNATES.
- Source role
- primary disclosure
Evidence record
New source supporting a material update to the existing DiggingBeagle research unit CASE-2026-DB233-MCP-GIT-ALTERNATES.
Claim-level citations (1)
- supportsMCP Git repository confinement missed alternate object stores: The November 11 Git MCP advisory documents a second repository-identity bypass in linked worktrees, where a common Git directory could be treated as an allowed separate Git directory; the patched 2026.11.11 version addresses external alternates and directory-role confusion.
Git MCP advisory GHSA-q74p-4wrc-q7w6: linked worktree / common directory, object alternates and fixed 2026.11.11