Evidence · DiggingBeagle record
Reference Git MCP server read-only operations executed malicious .git/config commands
Upstream reference Git MCP advisory documents shell-helper execution via retained repository .git/config on nominally read-only status and diff tools. It lists a 2026.11.11 fix and explicitly separates preserved local configuration from a clean clone without it.
- Source role
- primary disclosure
Evidence record
Upstream reference Git MCP advisory documents shell-helper execution via retained repository .git/config on nominally read-only status and diff tools. It lists a 2026.11.11 fix and explicitly separates preserved local configuration from a clean clone without it.
Claim-level citations (2)
- supportsRead-only Git MCP calls executed commands supplied by repository configuration: GHSA-6hqx-gqrx-c5r2 demonstrates repository-configured program execution from read-only Git MCP tools before the 2026.11.11 patch.
Security advisory, read-only git_status and git_diff reproduction; patched behavior
- supportsMCP reference servers: The modelcontextprotocol/servers repository distributes reference MCP tooling, including a Git server with read-only actions that can reach executable Git helpers.
Security advisory, read-only git_status and git_diff reproduction; patched behavior