mcpsnoop

MCP 向け Wireshark。 AI クライアントと MCP サーバー間の実際のツール呼び出しをすべて、ターミナル上でライブ表示する透過プロキシです。 問題点 公式の MCP Inspector は独自のクライアントとして接続するため、 あなたの クライアント（Cursor、Claude...

mcp-pwn

CVE-2026-23744 — MCPJam 未授权远程代码执行 概述 MCPJam 是一个开源的 MCP（模型上下文协议）检查器和代理，用于连接、调试和管理 MCP 服务器。版本 = 1.4.3 攻击向量| 网络 — 无需认证 披露日期| 2026-01-15 技术分析 存在漏洞的端点接受未经验证的 JSON POST 请求： root@kitploit: POST /api/mcp/connect HTTP/1.1 Host: :3000 Content-Type: application/json "serverConfig": "command": "sh", "args":...

mcp-doorman

mcp-doorman MCP 服务器的安全网关——每次工具调用都要在门口接受检查。 CI npm License: Apache-2.0 PRs welcome mcp-doorman 是一个即插即用代理，位于你的 AI 智能体（Claude Desktop、Claude Code、Cursor、VS Code 或任何 MCP 客户端）与其使用的 MCP 服务器之间。一条命令，零基础设施，每个 tools/list 和 tools/call 都会经过一个防护管道： 🛂 策略引擎 —— 按工具设置的允许/拒绝/需要批准规则，支持 glob 匹配 🕵️ 秘密信息擦除 —— AWS...

CVE-2026-12773

A flaw was found in BerriAI litellm, within its MCP Proxy component. A remote attacker could exploit an improper authentication vulnerability in the UserAPIKeyAuth function. This could allow unauthorized access, potentially compromising the confidentiality, integrity, and availability of data...

LiteLLM: MCP Proxy Has Improper Authentication

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...

CVE-2026-12773

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...

CVE-2026-12773

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...

CVE-2026-12773 BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...

CVE-2026-12773

Affected software: litellm MCP Proxy (BerriAI) up to version 1.59.8. The vulnerability lies in UserAPIKeyAuth in litellm/proxy/_experimental/mcp_server/auth/user_api_key_auth_mcp.py, where authentication can be bypassed if an invalid token triggers a swallowed 401/403 exception, allowing unauthen...

Malicious code in ant-mcp-proxy-for-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 51df3beb4457da4a841727c91a2517ba5727c841c08f9d43cf2b25be9e476564 During use of the package, it silently downloads and executes remote executables or scripts. During analysis, the remote resources were no longer available. Th...

MAL-2026-2669 Malicious code in ant-mcp-proxy-for-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 51df3beb4457da4a841727c91a2517ba5727c841c08f9d43cf2b25be9e476564 During use of the package, it silently downloads and executes remote executables or scripts. During analysis, the remote resources were no longer available. Th...

runZero Platform 安全漏洞

RunZero Platform is an asset discovery and attack surface management platform developed by the US company RunZero. Versions of RunZero Platform prior to 4.0.260202.0 contained security vulnerabilities. These vulnerabilities were due to improper authorization, which could lead to unauthorized acce...