A nested .git file let the Git MCP server out of its --repository until 2026.10.28. Which version does your uvx run?

mcp-server-git --repository is the one setting that keeps the reference Git MCP server inside a single repository. An advisory published on 2026-10-28 showed that a nested directory with a .git file pointing elsewhere let tool calls read and change a repository outside that boundary; the fix is ver…