Skip to content

Vulnerabilities of modelcontextprotocol servers

Is your version affected?

CVE Summary Score Published
CVE-2026-27735 Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP) 6.4 Medium Feb 25, 2026
CVE-2025-68145 In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict… 6.4 Medium Dec 17, 2025
CVE-2025-68144 In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments… 6.3 Medium Dec 17, 2025
CVE-2025-68143 Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP) 6.5 Medium Dec 17, 2025
CVE-2025-53109 Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP) 7.3 High Jul 2, 2025
CVE-2025-53110 Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP) 7.3 High Jul 2, 2025

Other modelcontextprotocol products