MCP-Inspector-CVE-2025-49596

MCP Inspector CVE-2025-49596 漏洞检测器 该脚本用于检测 MCP Inspector 服务器是否受到 CVE-2025-49596 漏洞影响，该安全问题表现为 /sse 端点响应未经身份验证的请求（缺少身份验证令牌）。 工作原理 脚本向目标 MCP Inspector 服务器的 /sse 端点发送 GET 请求。 检查响应： 如果服务器返回 HTTP 200 OK 且未要求提供身份验证令牌 ，则很可能存在漏洞。 如果服务器返回 HTTP 401 Unauthorized，则很可能已修补（v0.14.1+）。 其他响应则报告为意外情况。 依赖要求 Python...

CVE-2026-57128

PraisonAI (praisonaiagents

CVE-2026-57128 PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in src/praisonai-agents/praisonaiagents/server/server.py does not consult ServerConfig.authtoken before handling /publish, /events, or /info requests. A network client that can reach the server can broadcast...

CVE-2026-57128 PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the SSE server in src/praisonai-agents/praisonaiagents/server/server.py does not consult ServerConfig.authtoken before handling /publish, /events, or /info requests. A network client that can reach the server can broadcast...

CVE-2026-45019 Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For sse and streamable-http...

PT-2026-71083

An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events SSE streams through the /pubsub/subscribe/ endpoint. The token required decorator used by the Pub/Sub interface authenticated requests solely by matching the...

CVE-2026-63732

9router 0.4.59 fixed in 0.4.60 contains a chain of vulnerabilities: a hardcoded default password 123456 that authenticates any fresh installation, a bypass of the LOCALONLY network gate via a spoofed Host header, and unvalidated arguments passed to childprocess.spawn when registering MCP plugins....

CVE-2026-56280

Cap-go before 12.128.2 contains a privilege inversion vulnerability in GET /build/logs/:jobId that allows read-only API key holders to cancel running native builds. The endpoint registers an abort listener on the SSE stream that unconditionally invokes cancelBuildOnDisconnect using the privileged...

PT-2026-61777

Name of the Vulnerable Software and Affected Versions praisonai-agents affected versions not specified Description The MCP SSE server, when started via ToolsMCPServer.run sse or launch tools mcp servertransport="sse", binds to 0.0.0.0 by default and lacks authentication middleware and Origin-head...

CVE-2026-30968

Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents. Prior to 1.1.0, the SSE endpoint /sse/v1/... in Coral Server did not strongly validate that a connecting agent was a legitimate participant in the session. Th...

oatpp-mcp 安全特征问题漏洞

oatpp-mcp is an Oat++ open source implementation of the Model Context Protocol. A security signature issue vulnerability exists in oatpp-mcp that stems from an MCP SSE endpoint returning an instance pointer as a session ID, which could lead to a session hijacking attack...

CVE-2025-6515: Use of Insufficiently Random Values

The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP sessions, returning malicious responses...