Labs64 NetLicensing MCP Server path traversal vulnerability

Labs64 NetLicensing MCP Server versions prior to 0.1.8 have a path traversal vulnerability. This vulnerability stems from the use of netlicensinggetproduct, which passes the productnumber controlled by the caller into src/netlicensingmcp/tools/products.py. Without path segment validation, this...

CVE-2026-54446

creationtimestamp| type| source ---|---|--- 2026-07-14 22:35:02+00:00| published-proof-of-concept| https://github.com/Labs64/NetLicensing-MCP/security/advisories/GHSA-x9vc-9ffq-p3gj...