Capability Laundering in MCP 2: CVE-2025-68143 Anthropic Git MCP Server Path Traversal to Credential Exfiltration

CVE-2025-68143: Anthropic Git MCP Server's git_init bypasses CWD boundaries, enabling attackers to create repositories in sensitive directories and exfiltrate credentials via routine Git tool calls.