HIGH 7.5 NVD
CVE-2026-106764
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.
An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.
References
- https://github.com/rog0x/mcp-git-tools/issues/1
- https://stillosdigitalholdings.com/advisories/CVE-2026-106764.cve.json
- https://www.npmjs.com/package/@rog0x/mcp-git-tools
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-10-23 via NVD.
vulnfeed aggregates 15176 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.