A vulnerability categorized as critical has been discovered in modelcontextprotocol servers up to 2025.12.16. Impacted is the function
git_diff. Such manipulation leads to argument injection.
This vulnerability is referenced as CVE-2025-68144. It is possible to launch the attack remotely. No exploit is available.
It is advisable to upgrade the affected component.