mcp-pwn

CVE-2026-23744 — Nicht authentifizierte Remote-Codeausführung in MCPJam Zusammenfassung MCPJam ist ein Open-Source-MCP Model Context Protocol Inspektor und Proxy zum Verbinden, Debuggen und Verwalten von MCP-Servern. Versionen = 1.4.3 Angriffsvektor| Netzwerk – Keine Authentifizierung erforderlic...

mcpsnoop

Wireshark for MCP. mcpsnoop sits between your AI client and your MCP server and records every JSON-RPC frame they exchange, with no change to either side. Watch it live in your terminal, fail CI on what it finds, or send it to your tracing backend as OpenTelemetry spans. The problem The official...

mcp-doorman

mcp-doorman Das Sicherheits-Gateway für MCP-Server – jeder Tool-Aufruf wird an der Tür geprüft. CI npm License: Apache-2.0 PRs welcome mcp-doorman ist ein Drop-in-Proxy, der sich zwischen Ihren KI-Agenten Claude Desktop, Claude Code, Cursor, VS Code, jeder MCP-Client und die von ihm genutzten...

Aegis-releases

Aegis Claude Code's sandbox lets an agent read your SSH keys and AWS credentials by default. Aegis doesn't. Two layers, both verified on real hardware. Kernel sandbox — the agent's own shell cannot reach a denied path: $ ! cat /.ssh/idrsa cat: /Users/you/.ssh/idrsa: Operation not permitted $ ! ca...

PYSEC-2026-4067 LiteLLM: MCP Proxy Has Improper Authentication

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...

LiteLLM: MCP Proxy Has Improper Authentication

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/experimental/mcpserver/auth/userapikeyauthmcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be launched...

PT-2026-105823

A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file litellm/proxy/ experimental/mcp server/auth/user api key auth mcp.py of the component MCP Proxy. Executing a manipulation can lead to improper authentication. The attack may be...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-79538

The metatool-ai MetaMCP software, specifically version 2.4.22 and below, is vulnerable to Code Execution . This vulnerability exists in the internal MCP inspector proxy endpoint at GET /mcp-proxy/server/stdio. The root cause is located within the createTransport function in the STDIO branch , spe...

PT-2026-102885

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

EUVD-2026-89360

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-79538

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2026-79538: Improper Control of Generation of Code

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

mcpsnoop v0.22.0

Wireshark for MCP. mcpsnoop sits between your AI client and your MCP server and records every JSON-RPC frame they exchange, with no change to either side. Watch it live in your terminal, fail CI on what it finds, or send it to your tracing backend as OpenTelemetry spans. The problem The official...

mcpsnoop v0.19.0

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. The problem The official MCP Inspector connects as its own client, so it never sees what your client Cursor, Claude Code, Codex actually sends your server. An...

mcpsnoop v0.15.0

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. The problem The official MCP Inspector connects as its own client, so it never sees what your client Cursor, Claude Code, Codex actually sends your server. An...

mcpsnoop v0.14.0

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. The problem The official MCP Inspector connects as its own client, so it never sees what your client Cursor, Claude Code, Codex actually sends your server. An...

mcpsnoop v0.13.0

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. The problem The official MCP Inspector connects as its own client, so it never sees what your client Cursor, Claude Code, Codex actually sends your server. An...

mcpsnoop v0.12.0

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. The problem The official MCP Inspector connects as its own client, so it never sees what your client Cursor, Claude Code, Codex actually sends your server. An...