Product by Modelcontextprotocol
Servers
6 known vulnerabilities in Servers (Modelcontextprotocol), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-68145 | mcp-server-git has missing path validation when using --repository flag | 9.1 | |
| High | CVE-2025-68143 | Modelcontextprotocol Servers: Path Traversal | 8.8 | |
| High | CVE-2025-68144 | Modelcontextprotocol Servers: Argument Injection | 7.1 | |
| High | CVE-2025-53109 | Modelcontextprotocol Servers: Link Following | — | |
| High | CVE-2025-53110 | Model Context Protocol Servers Vulnerable to Path Validation Bypass via Colliding Path Prefix | — | |
| Medium | CVE-2026-27735 | mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries | 6.5 |