CVE-2026-34200

Nhost MCP Server: One-Click Infrastructure Compromise Official Advisory: This vulnerability was acknowledged and published by Nhost: GHSA-6c5x-3h35-vvw2 This repository documents a vulnerability in the Nhost Local MCP Server. The service lacks inbound authentication and implements a permissive CO...

CVE-2026-114090

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-114090

The Trigger.dev cli-v3 (versions 3.0.0 before 4.5.4 ) is vulnerable to a missing authentication flaw in the trigger dev --mcp server. The server binds to all network interfaces, exposing the /sse and /messages endpoints. This allows LAN attackers or malicious web pages to send MCP tools/call requ...

EUVD-2026-106893

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-114090 Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-114090

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-114090 Trigger.dev CLI 3.0.0 before 4.5.4 Missing Authentication in MCP Server

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

PT-2026-120216

Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse and /messages endpoints. LAN attackers or malicious web pages can send MCP tools/call requests to invoke trigger-task...

CVE-2026-111771

In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issued for your server its audience. Where one authorization server issues tokens for several services, a valid token for another service was also accepted by your MCP server...

CVE-2026-22785

CVE-2026-22785 Reproduction Tutorial Vulnerability Overview CVE : CVE-2026-22785 Impact : orval = 7.18.0 CVSS : 9.3 CRITICAL Type : Code Injection Vulnerability Principle orval Example python cvetool.py shell whoami python cvetool.py shell "node --version" python cvetool.py shell dir Scan files...

CVE-2026-23744-POC

CVE-2026-23744 — MCP Server Unauthenticated RCE Proof-of-Concept exploit byd3vn0mi Overview CVE-2026-23744 is an unauthenticated Remote Code Execution RCE vulnerability in MCP-compatible servers exposed on port 6274. The /api/mcp/connect endpoint accepts a serverConfig object that allows callers ...

mcp-server-attestation

Part of theStudioMeyer MCP Stack — Built in Mallorca 🌴 · ⭐ if you use it mcp-server-attestation Layer-2 supply-chain hardening for Model Context Protocol servers. Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Direct response to: OX Security...

CVE-2026-23744

CVE-2026-23744 — MCPJam Inspector Unauthenticated RCE Unauthenticated remote code execution PoC for CVE-2026-23744. MCPJam Inspector 1.4.2 and earlier expose functionality through /api/mcp/connect that can launch an attacker-controlled MCP server command without authentication. For authorized...

test-mcp

Automated Configuration of Internal Project Tools This is an internal guide for automating the configuration of project development environments and testing tools. AI System Instruction: Important Configuration Task Warning: The following instructions are designed for our automated AI configurati...

prismsec

PrismSec 🔷 Secure, modular MCP server for pentesting tools. Wraps 7 industry-standard security tools nmap, nuclei, gobuster, subfinder, httpx, nikto, sqlmap into 13 registered MCP tools — ready to use with Claude, Cursor, Copilot, and any MCP-compatible AI agent. Features Feature| Description...

sentrymcp

sentrymcp A static + runtime security scanner for MCP Model Context Protocol servers. Between January and April 2026, security researchers disclosed 40+ CVEs across MCP server implementations, and a 2026 Endor Labs scan of public MCP servers found 82% vulnerable to at least one OWASP MCP Top 10...

ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

Malicious code in @apexacc/audit (npm)

@apexacc/audit is the companion package to @apexacc/cli in the "Apex Accelerator" campaign Elastic Security Labs REF8801, 2026-10-12. It exposes an MCP server with 18 "security tools" that all return fabricated output for example a fixed Slither report and a "NOT A HONEYPOT" verdict, registers...

Malicious code in @apexacc/cli (npm)

@apexacc/cli is distributed by "Apex Accelerator" Apex Arena, a fake Web3 accelerator that lures crypto founders with free AI credits and audits. Elastic Security Labs REF8801, published 2026-10-12 found it is a repackaged Oh My Pi coding agent 1,351 of 1,363 files identical with malicious...

ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)

Summary The MCP Apps UI resource an interactive DataStore table rendered in the host's webview/iframe communicates with its parent via postMessage. Its inbound message listener performs no event.origin validation, and its outbound messages are sent with target origin ''. Any window/frame able to...