Zero Radar
← feed
HighVulnerabilityCVE-2026-106764updated 29 Oct 2026, 20:59 UTC

MCP Git Tools npm package can let attackers run code on your machine

A small npm package that helps AI assistants work with Git can be abused by an outside attacker to run their own commands on the computer using it. If you use this package, someone could take control of that machine.

Official, 2 sources
SeverityHighCVSS 7.5 of 10
Being exploited?UnclearNo reports either way yet
Fix available?UnclearNo fixed version published in the sources yet
How sure is this?Official, 2 sourcesBacked by an official source

What happened

The resolveBaseBranch function in @rog0x/mcp-git-tools (versions up to and including 1.0.1) allows remote arbitrary code execution.

Why it is dangerous: An attacker who can reach this function could run arbitrary code with the privileges of the process using the package, which may expose source code, credentials, or the wider system.

Are you affected?

You are affected if you use @rog0x/mcp-git-tools version 1.0.1 or earlier.

Package / productAffected versionsFixed in
@rog0x/mcp-git-tools · npm<= 1.0.1no fix yet

What to do

  1. Check whether @rog0x/mcp-git-tools is installed, for example with npm ls @rog0x/mcp-git-tools
  2. Remove the package or pin it to a version newer than 1.0.1 once a fix is published
  3. Watch the GitHub advisory GHSA-jwc4-922r-f2rw for the patched version and mitigation details

Timeline

  1. 23 Oct 2026, 15:17 UTC
    Publicly disclosed
  2. 23 Oct 2026, 15:17 UTC
    Reported by NVD · NVD
  3. 29 Oct 2026, 20:59 UTC
    GitHub Advisory reported on it · GitHub Advisory

Sources 2 reports, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
CVE-2026-106764 · GHSA-jwc4-922r-f2rw
CVSS
7.5 / 10
EPSS
0.5% chance of exploitation within 30 days
Disclosed
23 Oct 2026, 15:17 UTC
On Zero Radar
before the radar started
Last change
29 Oct 2026, 20:59 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

MCP Git Tools npm package can let attackers run code on your machine · Zero Radar