CVE-2026-81102

CVE-2026-81102 affects the Dropbox Dash MCP server (src/mcp_server_dash.py), which in its network mode bound its listener to the loopback address but never validated the Host header , and included no transport-security settings. This allowed a DNS rebinding attack: a malicious page in a visitor's...