Cybersecurity researchers found three serious vulnerabilities in Anthropic's mcp-server-git, allowing attackers to manipulate AI assistants without needing system access. The flaws, affecting all versions before December 2025, enable code execution, file deletion, and potential exposure of sensitive data. Users are urged to update their systems immediately.