Advisories · Technology

cyanheads git-mcp-server.

Every CVE that names cyanheads git-mcp-server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85626 CVE record

CVSS 8.7 High

git-mcp-server 2.15.1 Argument Injection via Git Ref Parameters
- cyanheads git-mcp-server
- Command injection
Not analysed yet 4 Sept 2026