CVE-2026-57496

The "netlicensinggetproduct" MCP tool in "netlicensing-mcp" interpolates a caller-controlled "productnumber" argument directly into a REST URL path without any validation. Passing "../token" as the product number causes "httpx" to normalize "/product/../token" into "/token", silently redirecting...