CVE-2026-4496: OS Command Injection in Git-MCP-Server via Unsanitized child_process.exec

TheHackerWire·medium signalXBlueskyLinkedInCopy link

Publicly disclosed March 20, 2026 (CVSS 5.3), CVE-2026-4496 affects the Git-MCP-Server — the MCP adapter that gives agents git access. The vulnerability is in gitUtils.ts where user-supplied parameters are passed directly into child_process.exec without sanitization, enabling OS command injection via any agent input that reaches a git operation. This is a code execution risk in a tool that agents use in nearly every coding workflow. Any agent pipeline that exposes git operations through this MCP server without input validation should be treated as vulnerable until patched.