Hacker Blog Posts

Invariant Labs Blog company blog

GitHub MCP exploited: Accessing private repositories via MCP

by <br/><br/>Marco Milanta<br/>Luca Beurer-Kellner invariantlabs.ai published 2025-05-267 min read

We showcase a critical vulnerability with the official GitHub MCP server, allowing attackers to access private repository data. The vulnerability is among the first discovered by Invariant's security analyzer for detecting toxic agent flows.
Read on invariantlabs.ai → Discuss on HN (298) Archived copy
Points
508
HN comments
298
Submissions
2
Cited by
0 commenters

Security & PrivacySoftware Engineering2025

On Hacker News

SubmittedTitle on HNPointsComments
May 26, 2025GitHub MCP exploited: Accessing private repositories via MCP by andy99508297
May 26, 2025Accessing private GitHub repositories via MCP by gokhan1101

Related posts from the same era