EXPLOIT-CVE-2026-42559

CVE-2026-42559 — Rebind de DNS en el transporte de servidor HTTP Streamable de rmcp Un laboratorio Docker autónomo y una prueba de concepto en Python para CVE-2026-42559 GHSA-89vp-x53w-74fx / RUSTSEC-2026-0189. | ---|--- Afectado| rmcp — el SDK oficial de Rust para el Model Context Protocol — 1.4...

CVE-2026-42559

CVE-2026-42559 — DNS rebinding in the rmcp Streamable HTTP server transport A self-contained Docker lab and Python proof of concept for CVE-2026-42559 GHSA-89vp-x53w-74fx / RUSTSEC-2026-0189...

CVE-2025-54074: Improper Neutralization of Special Elements used in an OS Command

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth...