PROMPT INJECTION BUGS FOUND IN OFFICIAL ANTHROPIC GIT MCP SERVER

Summary from the TLDR InfoSec newsletter

Cyata discovered three prompt-injection vulnerabilities in Anthropic's reference MCP server for the git implementation. The vulnerabilities could allow an attacker to execute arbitrary code when the MCP server is used alongside a filesystem MCP, delete arbitrary files, and load arbitrary files into an LLM's context. They arise from mcp-server-git failing to properly validate repository paths or sanitize arguments passed to Git commands.