An insecure implementation of the resolveBaseBranch function in the npm package @rog0x/mcp-git-tools 1.0.1 lets a remote attacker supply crafted input that triggers arbitrary code execution, giving attacker control over system resources and the ability to exfiltrate data, pivot, or fully compromise the environment where the tool runs. This flaw is a classic example of code injection due to inadequate input validation.

The vulnerability affects the npm package @rog0x/mcp-git-tools version 1.0.1. No other vendors or product versions are listed; any installation of this package that uses resolveBaseBranch with potentially untrusted data is at risk.

The CVSS score of 7.5 indicates high severity. The EPSS score is 0.00503 (<1%), indicating a very low but non-zero probability of exploitation. The absence of a KEV listing suggests no widespread exploitation yet. The likely attack vector is remote, where an adversary can influence the input to resolveBaseBranch via external triggers such as webhooks or scripts, leading to code execution.